HierarchyMap

TenantSummary

Anything which can help you learn Azure Policy GitHub
Download CSV semicolon | comma
Scope Scope Id Policy DisplayName PolicyId Category Policy Effect Role definitions Unique assignments Used in PolicySets CreatedOn CreatedBy UpdatedOn UpdatedBy
Mg alz API App should only be accessible over HTTPS /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-appserviceapiapp-http App Service Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Application Gateway should be deployed with WAF enabled /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-appgw-without-waf Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz AppService append enable https only setting to enforce https setting. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-appservice-httpsonly App Service Default: Append; Allowed: Append,Disabled n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz AppService append sites with minimum TLS version to enforce. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-appservice-latesttls App Service Default: Append; Allowed: Append,Disabled n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Azure Cache for Redis Append a specific min TLS version requirement and enforce TLS. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-redis-sslenforcement Cache Default: Append; Allowed: Append,Disabled n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Azure Cache for Redis Append and the enforcement that enableNonSslPort is disabled. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-redis-disablenonsslport Cache Default: Append; Allowed: Append,Disabled,Modify n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Azure Cache for Redis only secure connections should be enabled /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-redis-http Cache Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Azure Database for MySQL server deploy a specific min TLS version and enforce SSL. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-mysql-sslenforcement SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Owner 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Azure Database for PostgreSQL server deploy a specific min TLS version requirement and enforce SSL /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-postgresql-sslenforcement SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Owner 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Azure Machine Learning should have disabled public network access /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-publicnetworkaccess Machine Learning Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:05 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Azure SQL Database should have the minimal TLS version set to the highest version /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-sql-mintls SQL Default: Audit; Allowed: Audit,Disabled,Deny n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Azure Storage deploy a specific min TLS version requirement and enforce SSL/HTTPS /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-storage-sslenforcement Storage Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Owner 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Control private endpoint connections to Azure Machine Learning /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/audit-machinelearning-privateendpointid Machine Learning Default: Audit; Allowed: Audit,Deny,Disabled n/a 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny AKS cluster creation in Azure Machine Learning /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-aks Machine Learning Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny Databricks workspaces without Vnet injection /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-databricks-virtualnetwork Databricks Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny non-premium Databricks sku /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-databricks-sku Databricks Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny public acces behind vnet to Azure Machine Learning workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-publicaccesswhenbehindvnet Machine Learning Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny public access of Azure Machine Learning clusters via SSH /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-computecluster-remoteloginportpublicaccess Machine Learning Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny public IPs for Databricks cluster /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-databricks-nopublicip Databricks Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny the creation of private DNS /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-private-dns-zones Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny the creation of public IP /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-publicip Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny vNet peering /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-vnet-peering Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny vNet peering cross subscription. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-vnet-peer-cross-sub Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy a default budget on all subscriptions under the assigned scope /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-budget Budget Default: DeployIfNotExists; Allowed: DeployIfNotExists,AuditIfNotExists,Disabled Contributor 0 0 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy a route table with specific user defined routes /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-custom-route-table Network Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Network Contributor 0 0 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy an Azure DDoS Protection Standard plan /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-ddosprotection Network Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Network Contributor 0 0 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Azure Firewall Manager policy in the subscription /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-firewallpolicy Network Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Contributor 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Azure Security Center Security Contacts /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-asc-securitycontacts Security Center Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Security Admin 0 1 (Deploy Microsoft Defender for Cloud configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-mdfc-config)) 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Analysis Services to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-analysisservice Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for API Management to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-apimgmt Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for App Service Plan to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-webserverfarm Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for App Service to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-website Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Application Gateway to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-applicationgateway Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Automation to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-aa Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Azure API for FHIR to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-apiforfhir Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Azure Data Explorer Cluster to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-dataexplorercluster Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Azure Function App to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-function Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Azure Media Service to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mediaservice Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for CDN Endpoint to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-cdnendpoints Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Cognitive Services to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-cognitiveservices Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Container Instances to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-aci Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Container Registry to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-acr Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Cosmos DB to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-cosmosdb Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Data Factory to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-datafactory Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Data Lake Analytics to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-dlanalytics Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Database for MySQL to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mysql Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Database for PostgreSQL to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-postgresql Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Databricks to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-databricks Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Event Grid subscriptions to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-eventgridsub Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Event Grid System Topic to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-eventgridsystemtopic Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Event Grid Topic to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-eventgridtopic Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for ExpressRoute to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-expressroute Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Firewall to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-firewall Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Front Door to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-frontdoor Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for HDInsight to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-hdinsight Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for IoT Hub to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-iothub Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:04 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Load Balancer to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-loadbalancer Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Logic Apps integration service environment to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-logicappsise Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Machine Learning workspace to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mlworkspace Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for MariaDB to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mariadb Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Network Interfaces to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-nic Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Network Security Groups to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-networksecuritygroups Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Power BI Embedded to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-powerbiembedded Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Redis Cache to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-rediscache Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Relay to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-relay Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for SignalR to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-signalr Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for SQL Elastic Pools to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-sqlelasticpools Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for SQL Managed Instances to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-sqlmi Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Time Series Insights to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-timeseriesinsights Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Traffic Manager to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-trafficmanager Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Virtual Machine Scale Sets to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-vmss Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Virtual Machines to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-vm Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Virtual Network to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-virtualnetwork Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for VPN Gateway to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-vnetgw Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for WVD Application group to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-wvdappgroup Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for WVD Host Pools to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-wvdhostpools Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for WVD Workspace to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-wvdworkspace Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy SQL database auditing settings /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-auditingsettings SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled SQL Security Manager 0 1 (Deploy SQL Database built-in SQL security configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-sql-security)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy SQL Database security Alert Policies configuration with email admin accounts /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-securityalertpolicies SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled SQL Security Manager 0 1 (Deploy SQL Database built-in SQL security configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-sql-security)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy SQL Database Transparent Data Encryption /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-tde SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled SQL Security Manager 0 1 (Deploy SQL Database built-in SQL security configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-sql-security)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy SQL Database vulnerability Assessments /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-vulnerabilityassessments SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled SQL Security Manager; Monitoring Contributor 0 1 (Deploy SQL Database built-in SQL security configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-sql-security)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Virtual Network with peering to the hub /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-vnet-hubspoke Network Fixed: deployIfNotExists Contributor 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Windows Domain Join Extension with keyvault configuration /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-windows-domainjoin Guest Configuration Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Virtual Machine Contributor 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploys NSG flow logs and traffic analytics /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-nsg-flowlogs Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 0 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploys NSG flow logs and traffic analytics to Log Analytics /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-nsg-flowlogs-to-la Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Storage Account Contributor; Network Contributor; Storage Account Key Operator Service Role; Log Analytics Contributor; Contributor 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Enforce scale settings for Azure Machine Learning compute clusters /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-computecluster-scale Budget Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Enforce subnet connectivity for Azure Machine Learning compute clusters and compute instances /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-compute-subnetid Machine Learning Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Enforces high business impact Azure Machine Learning Workspaces /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-hbiworkspace Machine Learning Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Function App should only be accessible over HTTPS /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-appservicefunctionapp-http App Service Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz KeyVault SoftDelete should be enabled /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-kv-softdelete Key Vault Fixed: append n/a 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Limit allowed vm sizes for Azure Machine Learning compute clusters and compute instances /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-compute-vmsize Budget Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz MySQL database servers enforce SSL connections. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-mysql-http SQL Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz No child resources in Automation Account /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-aa-child-resources Automation Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz PostgreSQL database servers enforce SSL connection. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-postgresql-http SQL Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Public network access should be disabled for MariaDB /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-publicendpoint-mariadb SQL Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz RDP access from the Internet should be blocked /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-rdp-from-internet Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz SQL Managed Instance should have the minimal TLS version set to the highest version /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-sqlmi-mintls SQL Default: Audit; Allowed: Audit,Disabled,Deny n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz SQL managed instances deploy a specific min TLS version requirement. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sqlmi-mintls SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Owner 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz SQL servers deploys a specific min TLS version requirement. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-mintls SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Owner 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Storage Account set to minumum TLS and Secure transfer should be enabled /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-storage-mintls Storage Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Subnets should have a Network Security Group /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-subnet-without-nsg Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Subnets should have a User Defined Route /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-subnet-without-udr Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Web Application should only be accessible over HTTPS /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-appservicewebapp-http App Service Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Download CSV semicolon | comma
Policy DisplayName PolicyId
KeyVault SoftDelete should be enabled /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-kv-softdelete
Control private endpoint connections to Azure Machine Learning /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/audit-machinelearning-privateendpointid
No child resources in Automation Account /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-aa-child-resources
Application Gateway should be deployed with WAF enabled /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-appgw-without-waf
Deny public IPs for Databricks cluster /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-databricks-nopublicip
Deny non-premium Databricks sku /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-databricks-sku
Deny Databricks workspaces without Vnet injection /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-databricks-virtualnetwork
Deny AKS cluster creation in Azure Machine Learning /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-aks
Enforce subnet connectivity for Azure Machine Learning compute clusters and compute instances /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-compute-subnetid
Limit allowed vm sizes for Azure Machine Learning compute clusters and compute instances /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-compute-vmsize
Deny public access of Azure Machine Learning clusters via SSH /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-computecluster-remoteloginportpublicaccess
Enforce scale settings for Azure Machine Learning compute clusters /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-computecluster-scale
Enforces high business impact Azure Machine Learning Workspaces /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-hbiworkspace
Deny public acces behind vnet to Azure Machine Learning workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-publicaccesswhenbehindvnet
Azure Machine Learning should have disabled public network access /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-publicnetworkaccess
Deny the creation of private DNS /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-private-dns-zones
Public network access should be disabled for MariaDB /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-publicendpoint-mariadb
Deny the creation of public IP /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-publicip
RDP access from the Internet should be blocked /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-rdp-from-internet
Subnets should have a Network Security Group /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-subnet-without-nsg
Subnets should have a User Defined Route /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-subnet-without-udr
Deny vNet peering cross subscription. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-vnet-peer-cross-sub
Deny vNet peering /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-vnet-peering
Deploy a default budget on all subscriptions under the assigned scope /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-budget
Deploy a route table with specific user defined routes /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-custom-route-table
Deploy an Azure DDoS Protection Standard plan /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-ddosprotection
Deploy Azure Firewall Manager policy in the subscription /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-firewallpolicy
Deploys NSG flow logs and traffic analytics /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-nsg-flowlogs
Deploys NSG flow logs and traffic analytics to Log Analytics /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-nsg-flowlogs-to-la
Deploy Virtual Network with peering to the hub /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-vnet-hubspoke
Deploy Windows Domain Join Extension with keyvault configuration /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-windows-domainjoin
Download CSV semicolon | comma
Scope Scope Id PolicySet DisplayName PolicySetId Category Unique assignments Policies used in PolicySet CreatedOn CreatedBy UpdatedOn UpdatedBy
Mg alz Configure Azure PaaS services to use private DNS zones /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones Network 0 20 (Configure Azure File Sync to use private DNS zones (/providers/microsoft.authorization/policydefinitions/06695360-db88-47f6-b976-7500d4297475); Configure Azure Web PubSub Service to use private DNS zones (/providers/microsoft.authorization/policydefinitions/0b026355-49cb-467b-8ac4-f777874e175a); Deploy - Configure private DNS zones for private endpoints that connect to Batch accounts (/providers/microsoft.authorization/policydefinitions/4ec38ebc-381f-45ee-81a4-acbc4be878f8); Configure private DNS zones for private endpoints connected to App Configuration (/providers/microsoft.authorization/policydefinitions/7a860e27-9ca2-4fc6-822d-c2d248c300df); [Preview]: Configure Azure Recovery Services vaults to use private DNS zones (/providers/microsoft.authorization/policydefinitions/942bd215-1a66-44be-af65-6a1c0318dbe2); Configure IoT Hub device provisioning instances to use private DNS zones (/providers/microsoft.authorization/policydefinitions/aaa64d2d-2fa3-45e5-b332-0b031b9b30e8); [Preview]: Configure Azure Key Vaults to use private DNS zones (/providers/microsoft.authorization/policydefinitions/ac673a9a-f77d-4846-b2d8-a57f8e1c01d4); Deploy - Configure private DNS zones for private endpoints connect to Azure SignalR Service (/providers/microsoft.authorization/policydefinitions/b0e86710-7fb7-4a6c-a064-32e9b829509e); Configure App Services to use private DNS zones (/providers/microsoft.authorization/policydefinitions/b318f84a-b872-429b-ac6d-a01b96814452); Deploy - Configure Azure Event Grid topics to use private DNS zones (/providers/microsoft.authorization/policydefinitions/baf19753-7502-405f-8745-370519b20483); Configure disk access resources to use private DNS zones (/providers/microsoft.authorization/policydefinitions/bc05b96c-0b36-4ca9-82f0-5c53f96ce05a); Configure Cognitive Services accounts to use private DNS zones (/providers/microsoft.authorization/policydefinitions/c4bc6f10-cb41-49eb-b000-d5ab82e2a091); Deploy - Configure Azure IoT Hubs to use private DNS zones (/providers/microsoft.authorization/policydefinitions/c99ce9c1-ced7-4c3e-aca0-10e69ce0cb02); Deploy - Configure Azure Event Grid domains to use private DNS zones (/providers/microsoft.authorization/policydefinitions/d389df0a-e0d7-4607-833c-75a6fdac2c2d); Configure Azure Cache for Redis to use private DNS zones (/providers/microsoft.authorization/policydefinitions/e016b22b-e0eb-436d-8fd7-160c4eaed6e2); Configure Container registries to use private DNS zones (/providers/microsoft.authorization/policydefinitions/e9585a95-5b8c-4d03-b193-dc7eb5ac4c32); Configure Event Hub namespaces to use private DNS zones (/providers/microsoft.authorization/policydefinitions/ed66d4f5-8220-45dc-ab4a-20d1749c74e6); Configure Azure Machine Learning workspace to use private DNS zones (/providers/microsoft.authorization/policydefinitions/ee40564d-486e-4f68-a5ca-7a621edae0fb); Configure Service Bus namespaces to use private DNS zones (/providers/microsoft.authorization/policydefinitions/f0fcf93c-c063-4071-9668-c47474bd3564); Configure Azure Cognitive Search services to use private DNS zones (/providers/microsoft.authorization/policydefinitions/fbc14a67-53e4-4932-abcc-2049c6706009)) 2022-03-10 10:49:59 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 2022-03-10 12:43:06 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny or Audit resources without Encryption with a customer-managed key (CMK) /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encryption-cmk Encryption 0 15 (Azure API for FHIR should use a customer-managed key to encrypt data at rest (/providers/microsoft.authorization/policydefinitions/051cba44-2429-45b9-9649-46cec11c7119); Virtual machines should encrypt temp disks, caches, and data flows between Compute and Storage resources (/providers/microsoft.authorization/policydefinitions/0961003e-5a0a-4549-abde-af6a37f2724d); [Deprecated]: SQL servers should use customer-managed keys to encrypt data at rest (/providers/microsoft.authorization/policydefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd); PostgreSQL servers should use customer-managed keys to encrypt data at rest (/providers/microsoft.authorization/policydefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274); Azure Cosmos DB accounts should use customer-managed keys to encrypt data at rest (/providers/microsoft.authorization/policydefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f); Container registries should be encrypted with a customer-managed key (/providers/microsoft.authorization/policydefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580); Cognitive Services accounts should enable data encryption with a customer-managed key (/providers/microsoft.authorization/policydefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d); Storage accounts should use customer-managed key for encryption (/providers/microsoft.authorization/policydefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25); Both operating systems and data disks in Azure Kubernetes Service clusters should be encrypted by customer-managed keys (/providers/microsoft.authorization/policydefinitions/7d7be79c-23ba-4033-84dd-45e2a5ccdd67); MySQL servers should use customer-managed keys to encrypt data at rest (/providers/microsoft.authorization/policydefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833); Azure Data Box jobs should use a customer-managed key to encrypt the device unlock password (/providers/microsoft.authorization/policydefinitions/86efb160-8de7-451d-bc08-5d475b0aadae); Azure Stream Analytics jobs should use customer-managed keys to encrypt data (/providers/microsoft.authorization/policydefinitions/87ba29ef-1ab3-4d82-b763-87fcd4f531f7); Azure Batch account should use customer-managed keys to encrypt data (/providers/microsoft.authorization/policydefinitions/99e9ccd8-3db9-4592-b0d1-14b1715a4d8a); Azure Machine Learning workspaces should be encrypted with a customer-managed key (/providers/microsoft.authorization/policydefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8); Azure Synapse workspaces should use customer-managed keys to encrypt data at rest (/providers/microsoft.authorization/policydefinitions/f7d52b2d-e161-4dfa-a82b-55e564167385)) 2022-03-10 10:49:59 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 2022-03-10 12:43:06 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit Encryption 0 22 (Kubernetes clusters should be accessible only over HTTPS (/providers/microsoft.authorization/policydefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d); Latest TLS version should be used in your API App (/providers/microsoft.authorization/policydefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e); Latest TLS version should be used in your Web App (/providers/microsoft.authorization/policydefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b); Latest TLS version should be used in your Function App (/providers/microsoft.authorization/policydefinitions/f9d614c5-c173-4d56-95a7-b4437057d193); API App should only be accessible over HTTPS (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-appserviceapiapp-http); AppService append enable https only setting to enforce https setting. (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-appservice-httpsonly); AppService append sites with minimum TLS version to enforce. (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-appservice-latesttls); Azure Cache for Redis Append a specific min TLS version requirement and enforce TLS. (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-redis-sslenforcement); Azure Cache for Redis Append and the enforcement that enableNonSslPort is disabled. (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-redis-disablenonsslport); Azure Cache for Redis only secure connections should be enabled (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-redis-http); Azure Database for MySQL server deploy a specific min TLS version and enforce SSL. (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-mysql-sslenforcement); Azure Database for PostgreSQL server deploy a specific min TLS version requirement and enforce SSL (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-postgresql-sslenforcement); Azure SQL Database should have the minimal TLS version set to the highest version (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-sql-mintls); Azure Storage deploy a specific min TLS version requirement and enforce SSL/HTTPS (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-storage-sslenforcement); Function App should only be accessible over HTTPS (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-appservicefunctionapp-http); MySQL database servers enforce SSL connections. (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-mysql-http); PostgreSQL database servers enforce SSL connection. (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-postgresql-http); SQL Managed Instance should have the minimal TLS version set to the highest version (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-sqlmi-mintls); SQL managed instances deploy a specific min TLS version requirement. (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sqlmi-mintls); SQL servers deploys a specific min TLS version requirement. (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-mintls); Storage Account set to minumum TLS and Secure transfer should be enabled (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-storage-mintls); Web Application should only be accessible over HTTPS (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-appservicewebapp-http)) 2022-03-10 10:49:59 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 2022-03-10 12:43:06 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings to Azure Services /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics Monitoring 0 62 (Deploy Diagnostic Settings for Service Bus to Log Analytics workspace (/providers/microsoft.authorization/policydefinitions/04d53d87-841c-4f23-8a5b-21564380b55e); Deploy Diagnostic Settings for Search Services to Log Analytics workspace (/providers/microsoft.authorization/policydefinitions/08ba64b8-738f-4918-9686-730d2ed79c7d); Deploy Diagnostic Settings for Event Hub to Log Analytics workspace (/providers/microsoft.authorization/policydefinitions/1f6e93e8-6b31-41b1-83f6-36e449a42579); Deploy Diagnostic Settings for Stream Analytics to Log Analytics workspace (/providers/microsoft.authorization/policydefinitions/237e0f7e-b0e8-4ec4-ad46-8c12cb66d673); Deploy - Configure diagnostic settings for Azure Kubernetes Service to Log Analytics workspace (/providers/microsoft.authorization/policydefinitions/6c66c325-74c8-42fd-a286-a74b0e2939d8); Configure diagnostic settings for storage accounts to Log Analytics workspace (/providers/microsoft.authorization/policydefinitions/6f8f98a4-f108-47cb-8e98-91a0d85cd474); Public IP addresses should have resource logs enabled for Azure DDoS Protection Standard (/providers/microsoft.authorization/policydefinitions/752154a7-1e0f-45c6-a880-ac75a7e4f648); Deploy - Configure diagnostic settings for SQL Databases to Log Analytics workspace (/providers/microsoft.authorization/policydefinitions/b79fa14e-238a-4c2d-b376-442ce508fc84); Deploy Diagnostic Settings for Logic Apps to Log Analytics workspace (/providers/microsoft.authorization/policydefinitions/b889a06c-ec72-4b03-910a-cb169ee18721); Deploy Diagnostic Settings for Key Vault to Log Analytics workspace (/providers/microsoft.authorization/policydefinitions/bef3f64c-5290-43b7-85b0-9b254eef4c47); Deploy Diagnostic Settings for Recovery Services Vault to Log Analytics workspace for resource specific categories. (/providers/microsoft.authorization/policydefinitions/c717fb0c-d118-4c43-ab3d-ece30ac81fb3); Deploy Diagnostic Settings for Batch Account to Log Analytics workspace (/providers/microsoft.authorization/policydefinitions/c84e5349-db6d-4769-805e-e14037dab9b5); Deploy Diagnostic Settings for Data Lake Analytics to Log Analytics workspace (/providers/microsoft.authorization/policydefinitions/d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03); Deploy Diagnostic Settings for Analysis Services to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-analysisservice); Deploy Diagnostic Settings for API Management to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-apimgmt); Deploy Diagnostic Settings for App Service Plan to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-webserverfarm); Deploy Diagnostic Settings for App Service to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-website); Deploy Diagnostic Settings for Application Gateway to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-applicationgateway); Deploy Diagnostic Settings for Automation to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-aa); Deploy Diagnostic Settings for Azure API for FHIR to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-apiforfhir); Deploy Diagnostic Settings for Azure Data Explorer Cluster to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-dataexplorercluster); Deploy Diagnostic Settings for Azure Function App to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-function); Deploy Diagnostic Settings for Azure Media Service to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mediaservice); Deploy Diagnostic Settings for CDN Endpoint to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-cdnendpoints); Deploy Diagnostic Settings for Cognitive Services to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-cognitiveservices); Deploy Diagnostic Settings for Container Instances to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-aci); Deploy Diagnostic Settings for Container Registry to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-acr); Deploy Diagnostic Settings for Cosmos DB to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-cosmosdb); Deploy Diagnostic Settings for Data Factory to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-datafactory); Deploy Diagnostic Settings for Data Lake Analytics to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-dlanalytics); Deploy Diagnostic Settings for Database for MySQL to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mysql); Deploy Diagnostic Settings for Database for PostgreSQL to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-postgresql); Deploy Diagnostic Settings for Databricks to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-databricks); Deploy Diagnostic Settings for Event Grid subscriptions to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-eventgridsub); Deploy Diagnostic Settings for Event Grid System Topic to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-eventgridsystemtopic); Deploy Diagnostic Settings for Event Grid Topic to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-eventgridtopic); Deploy Diagnostic Settings for ExpressRoute to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-expressroute); Deploy Diagnostic Settings for Firewall to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-firewall); Deploy Diagnostic Settings for Front Door to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-frontdoor); Deploy Diagnostic Settings for HDInsight to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-hdinsight); Deploy Diagnostic Settings for IoT Hub to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-iothub); Deploy Diagnostic Settings for Load Balancer to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-loadbalancer); Deploy Diagnostic Settings for Logic Apps integration service environment to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-logicappsise); Deploy Diagnostic Settings for Machine Learning workspace to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mlworkspace); Deploy Diagnostic Settings for MariaDB to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mariadb); Deploy Diagnostic Settings for Network Interfaces to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-nic); Deploy Diagnostic Settings for Network Security Groups to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-networksecuritygroups); Deploy Diagnostic Settings for Power BI Embedded to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-powerbiembedded); Deploy Diagnostic Settings for Redis Cache to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-rediscache); Deploy Diagnostic Settings for Relay to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-relay); Deploy Diagnostic Settings for SignalR to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-signalr); Deploy Diagnostic Settings for SQL Elastic Pools to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-sqlelasticpools); Deploy Diagnostic Settings for SQL Managed Instances to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-sqlmi); Deploy Diagnostic Settings for Time Series Insights to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-timeseriesinsights); Deploy Diagnostic Settings for Traffic Manager to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-trafficmanager); Deploy Diagnostic Settings for Virtual Machine Scale Sets to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-vmss); Deploy Diagnostic Settings for Virtual Machines to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-vm); Deploy Diagnostic Settings for Virtual Network to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-virtualnetwork); Deploy Diagnostic Settings for VPN Gateway to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-vnetgw); Deploy Diagnostic Settings for WVD Application group to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-wvdappgroup); Deploy Diagnostic Settings for WVD Host Pools to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-wvdhostpools); Deploy Diagnostic Settings for WVD Workspace to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-wvdworkspace)) 2022-03-10 10:49:59 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 2022-03-10 12:43:06 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Microsoft Defender for Cloud configuration /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-mdfc-config Security Center 0 12 (Configure Azure Defender for Key Vaults to be enabled (/providers/microsoft.authorization/policydefinitions/1f725891-01c0-420a-9059-4fa46cb770b7); Configure Azure Defender for DNS to be enabled (/providers/microsoft.authorization/policydefinitions/2370a3c1-4a25-4283-a91a-c9c1a145fb2f); Configure Azure Defender for open-source relational databases to be enabled (/providers/microsoft.authorization/policydefinitions/44433aa3-7ec2-4002-93ea-65c65ff0310a); Configure Azure Defender for SQL servers on machines to be enabled (/providers/microsoft.authorization/policydefinitions/50ea7265-7d8c-429e-9a7d-ca1f410191c3); Configure Azure Defender for Storage to be enabled (/providers/microsoft.authorization/policydefinitions/74c30959-af11-47b3-9ed2-a26e03f427a3); Configure Azure Defender for servers to be enabled (/providers/microsoft.authorization/policydefinitions/8e86a5b6-b9bd-49d1-8e21-4bb8a0862222); Configure Azure Defender for App Service to be enabled (/providers/microsoft.authorization/policydefinitions/b40e7bcd-a1e5-47fe-b9cf-2f534d0bfb7d); Configure Azure Defender for Resource Manager to be enabled (/providers/microsoft.authorization/policydefinitions/b7021b2b-08fd-4dc0-9de7-3c6ece09faf9); Configure Azure Defender for Azure SQL database to be enabled (/providers/microsoft.authorization/policydefinitions/b99b73e7-074b-4089-9395-b7236f094491); Configure Microsoft Defender for Containers to be enabled (/providers/microsoft.authorization/policydefinitions/c9ddb292-b203-4738-aead-18e2716e858f); Deploy export to Log Analytics workspace for Azure Security Center data (/providers/microsoft.authorization/policydefinitions/ffb6f416-7bd2-4488-8828-56585fef2be9); Deploy Azure Security Center Security Contacts (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-asc-securitycontacts)) 2022-03-10 10:49:59 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 2022-03-10 12:43:06 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy SQL Database built-in SQL security configuration /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-sql-security SQL 0 4 (Deploy SQL database auditing settings (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-auditingsettings); Deploy SQL Database security Alert Policies configuration with email admin accounts (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-securityalertpolicies); Deploy SQL Database Transparent Data Encryption (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-tde); Deploy SQL Database vulnerability Assessments (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-vulnerabilityassessments)) 2022-03-10 10:49:59 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 2022-03-10 12:43:05 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Public network access should be disabled for PaaS services /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deny-publicpaasendpoints 0 10 (Azure Kubernetes Service Private Clusters should be enabled (/providers/microsoft.authorization/policydefinitions/040732e8-d947-40b8-95d6-854c95024bf8); Public network access should be disabled for Container registries (/providers/microsoft.authorization/policydefinitions/0fdf0491-d080-4575-b627-ad0e843cba0f); Public network access on Azure SQL Database should be disabled (/providers/microsoft.authorization/policydefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780); Public network access should be disabled for Azure File Sync (/providers/microsoft.authorization/policydefinitions/21a8cd35-125e-4d13-b82d-2e19b7208bb7); Storage accounts should restrict network access (/providers/microsoft.authorization/policydefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c); [Preview]: Azure Key Vault should disable public network access (/providers/microsoft.authorization/policydefinitions/55615ac9-af46-4a59-874e-391cc3dfb490); Public network access should be disabled for PostgreSQL flexible servers (/providers/microsoft.authorization/policydefinitions/5e1de0e3-42cb-4ebc-a86d-61d0c619ca48); Public network access should be disabled for Batch accounts (/providers/microsoft.authorization/policydefinitions/74c5a0ae-5e48-4738-b093-65e23a060488); Azure Cosmos DB should disable public network access (/providers/microsoft.authorization/policydefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a); Public network access should be disabled for MySQL flexible servers (/providers/microsoft.authorization/policydefinitions/c9299215-ae47-4f50-9c54-8a392f68a052)) 2022-03-10 10:49:59 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 2022-03-10 12:43:06 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Download CSV semicolon | comma
PolicySet DisplayName PolicySetId
Public network access should be disabled for PaaS services /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deny-publicpaasendpoints
Deploy Diagnostic Settings to Azure Services /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics
Deploy Microsoft Defender for Cloud configuration /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-mdfc-config
Configure Azure PaaS services to use private DNS zones /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones
Deploy SQL Database built-in SQL security configuration /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-sql-security
Deny or Audit resources without Encryption with a customer-managed key (CMK) /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encryption-cmk
Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit
Download CSV semicolon | comma
PolicySet DisplayName PolicySetId Policy DisplayName PolicyId Deprecated Property
Deny or Audit resources without Encryption with a customer-managed key (CMK) /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encryption-cmk [Deprecated]: SQL servers should use customer-managed keys to encrypt data at rest /providers/microsoft.authorization/policydefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd true

0 Policy assignments / deprecated Built-in Policy

0 Policy exemptions

0 Policy assignments orphaned

0 Policy assignments

Download CSV semicolon | comma
Role Name RoleId Assignable Scopes Data CreatedOn CreatedBy UpdatedOn UpdatedBy
Application owners (DevOps/AppOps) 4308c4e6-07d5-534f-9e18-32769872a3f4 1 (/providers/Microsoft.Management/managementGroups/alz) false 03/10/2022 10:50:42 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:46 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Network management (NetOps) 4a200286-e2a0-5239-aa8f-fe0a90dd2eb5 1 (/providers/Microsoft.Management/managementGroups/alz) false 03/10/2022 10:50:43 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:46 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Security operations (SecOps) b2960c40-d3db-5190-94c1-5b07c9547956 1 (/providers/Microsoft.Management/managementGroups/alz) false 03/10/2022 10:50:42 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:46 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Subscription owner 8736d87d-8d31-53be-b952-a04c8d470f69 1 (/providers/Microsoft.Management/managementGroups/alz) false 03/10/2022 10:50:42 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:46 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Download CSV semicolon | comma
Role Name RoleId Role Assignable Scopes
Application owners (DevOps/AppOps) 4308c4e6-07d5-534f-9e18-32769872a3f4 1 (/providers/Microsoft.Management/managementGroups/alz)
Network management (NetOps) 4a200286-e2a0-5239-aa8f-fe0a90dd2eb5 1 (/providers/Microsoft.Management/managementGroups/alz)
Security operations (SecOps) b2960c40-d3db-5190-94c1-5b07c9547956 1 (/providers/Microsoft.Management/managementGroups/alz)
Subscription owner 8736d87d-8d31-53be-b952-a04c8d470f69 1 (/providers/Microsoft.Management/managementGroups/alz)
Download CSV semicolon | comma
Role AssignmentId Role Name RoleId Impacted Mg/Sub
/providers/microsoft.authorization/roleassignments/1810e41e-df60-4178-8c74-6ea2fec00a8a Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Mg: 10; Sub: 0
/providers/microsoft.authorization/roleassignments/76765ae0-5721-47e6-88c1-c31983d77068 Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Mg: 10; Sub: 0
/providers/microsoft.authorization/roleassignments/78c99b5c-f9ff-47e7-8b19-261a31981dc1 Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Mg: 10; Sub: 0
/providers/microsoft.authorization/roleassignments/9ce51771-571b-4aba-8a8b-1a869ff15a27 Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Mg: 10; Sub: 0
Download CSV semicolon | comma
*Depending on the number of rows and your computer´s performance the table may respond with delay, download the csv for better filtering experience
Scope Management Group Id Management Group Name SubscriptionId Subscription Name Assignment Scope Role Role Id Role Type Data Can do Role assignment Identity Displayname Identity SignInName Identity ObjectId Identity Type Applicability Applies through membership Group Details PIM PIM assignment type PIM start PIM end Role AssignmentId Related Policy Assignment CreatedOn CreatedBy
Ten alz Azure Landing Zones inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct False /providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706 none 12/31/2021 01:33:57 ObjectType: User Member; ObjectDisplayName: Preston Parsard [AUTO]; ObjectSignInName: autocloudarc@autocloudarcm365.onmicrosoft.com; ObjectId: 289bfa7f-6c28-4240-aa52-dd105c74642d
Ten alz Azure Landing Zones inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct False /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877 none 01/25/2022 23:38:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz Azure Landing Zones inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e none 03/09/2022 00:40:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz Azure Landing Zones inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct False /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7 none 12/31/2021 01:39:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz Azure Landing Zones inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct False /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d none 08/02/2021 00:08:37 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz Azure Landing Zones inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct False /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d none 01/07/2022 00:19:25 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz Azure Landing Zones inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True AzOps n/a c426abf5-3e4d-48a0-8856-a5f9cfb4c10b SP APP INT direct False /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153 none 10/15/2021 00:05:15 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz Azure Landing Zones inherited Tenant Reader acdd72a7-3385-48ef-bd42-f606fba81ae7 Builtin false False Preston Parsard [MSFT] prestopa_microsoft.com#EXT#@autocloudarcm365.onmicrosoft.com 6384d11f-f8fa-4b62-b475-943fc13cbf8a User Guest direct False /providers/microsoft.authorization/roleassignments/49df53fb-9a72-41c7-9e29-8e9a9d08e934 none 01/25/2022 23:43:33 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz Azure Landing Zones inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 05fc20b8-3126-42c7-82d5-beeabe6283ca Unknown direct False /providers/microsoft.authorization/roleassignments/78c99b5c-f9ff-47e7-8b19-261a31981dc1 none 01/12/2022 19:37:04 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz Azure Landing Zones inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False prj-001-aaa-01 n/a 39523274-e37f-4043-a479-0304266fe06a SP MI Sys direct False /providers/microsoft.authorization/roleassignments/51a31262-cc3f-4cfd-948e-0fd0239807b1 none 01/19/2022 21:27:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz Azure Landing Zones inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 80bdde2b-cdea-4f5a-b948-3acec376f45b Unknown direct False /providers/microsoft.authorization/roleassignments/1810e41e-df60-4178-8c74-6ea2fec00a8a none 01/12/2022 00:11:41 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz Azure Landing Zones inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct False /providers/microsoft.authorization/roleassignments/890aafc2-324a-4f6a-a40a-3fb501e8a0de none 12/30/2021 21:45:18 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz Azure Landing Zones inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a d15b328a-6901-4188-ab78-ee7131537c0f Unknown direct False /providers/microsoft.authorization/roleassignments/9ce51771-571b-4aba-8a8b-1a869ff15a27 none 01/12/2022 21:05:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz Azure Landing Zones inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a debc9698-190e-497c-a00b-82dc86701bd6 Unknown direct False /providers/microsoft.authorization/roleassignments/76765ae0-5721-47e6-88c1-c31983d77068 none 01/12/2022 17:59:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Mg alz Azure Landing Zones thisScope MG Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 none 03/10/2022 10:47:40 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg alz-decommissioned Decommissioned inherited alz Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 none 03/10/2022 10:47:40 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Ten alz-decommissioned Decommissioned inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct False /providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706 none 12/31/2021 01:33:57 ObjectType: User Member; ObjectDisplayName: Preston Parsard [AUTO]; ObjectSignInName: autocloudarc@autocloudarcm365.onmicrosoft.com; ObjectId: 289bfa7f-6c28-4240-aa52-dd105c74642d
Ten alz-decommissioned Decommissioned inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct False /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877 none 01/25/2022 23:38:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-decommissioned Decommissioned inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e none 03/09/2022 00:40:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-decommissioned Decommissioned inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct False /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7 none 12/31/2021 01:39:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-decommissioned Decommissioned inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct False /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d none 08/02/2021 00:08:37 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-decommissioned Decommissioned inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct False /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d none 01/07/2022 00:19:25 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-decommissioned Decommissioned inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True AzOps n/a c426abf5-3e4d-48a0-8856-a5f9cfb4c10b SP APP INT direct False /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153 none 10/15/2021 00:05:15 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-decommissioned Decommissioned inherited Tenant Reader acdd72a7-3385-48ef-bd42-f606fba81ae7 Builtin false False Preston Parsard [MSFT] prestopa_microsoft.com#EXT#@autocloudarcm365.onmicrosoft.com 6384d11f-f8fa-4b62-b475-943fc13cbf8a User Guest direct False /providers/microsoft.authorization/roleassignments/49df53fb-9a72-41c7-9e29-8e9a9d08e934 none 01/25/2022 23:43:33 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-decommissioned Decommissioned inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 05fc20b8-3126-42c7-82d5-beeabe6283ca Unknown direct False /providers/microsoft.authorization/roleassignments/78c99b5c-f9ff-47e7-8b19-261a31981dc1 none 01/12/2022 19:37:04 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-decommissioned Decommissioned inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False prj-001-aaa-01 n/a 39523274-e37f-4043-a479-0304266fe06a SP MI Sys direct False /providers/microsoft.authorization/roleassignments/51a31262-cc3f-4cfd-948e-0fd0239807b1 none 01/19/2022 21:27:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-decommissioned Decommissioned inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 80bdde2b-cdea-4f5a-b948-3acec376f45b Unknown direct False /providers/microsoft.authorization/roleassignments/1810e41e-df60-4178-8c74-6ea2fec00a8a none 01/12/2022 00:11:41 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-decommissioned Decommissioned inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct False /providers/microsoft.authorization/roleassignments/890aafc2-324a-4f6a-a40a-3fb501e8a0de none 12/30/2021 21:45:18 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-decommissioned Decommissioned inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a d15b328a-6901-4188-ab78-ee7131537c0f Unknown direct False /providers/microsoft.authorization/roleassignments/9ce51771-571b-4aba-8a8b-1a869ff15a27 none 01/12/2022 21:05:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-decommissioned Decommissioned inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a debc9698-190e-497c-a00b-82dc86701bd6 Unknown direct False /providers/microsoft.authorization/roleassignments/76765ae0-5721-47e6-88c1-c31983d77068 none 01/12/2022 17:59:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Mg alz-decommissioned Decommissioned thisScope MG Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz-decommissioned/providers/microsoft.authorization/roleassignments/a2474fb8-5d7f-4d9a-9646-363d798b25f7 none 03/10/2022 10:48:02 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg alz-landingzones Landing Zones inherited alz Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 none 03/10/2022 10:47:40 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Ten alz-landingzones Landing Zones inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct False /providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706 none 12/31/2021 01:33:57 ObjectType: User Member; ObjectDisplayName: Preston Parsard [AUTO]; ObjectSignInName: autocloudarc@autocloudarcm365.onmicrosoft.com; ObjectId: 289bfa7f-6c28-4240-aa52-dd105c74642d
Ten alz-landingzones Landing Zones inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct False /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877 none 01/25/2022 23:38:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones Landing Zones inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e none 03/09/2022 00:40:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones Landing Zones inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct False /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7 none 12/31/2021 01:39:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones Landing Zones inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct False /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d none 08/02/2021 00:08:37 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones Landing Zones inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct False /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d none 01/07/2022 00:19:25 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones Landing Zones inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True AzOps n/a c426abf5-3e4d-48a0-8856-a5f9cfb4c10b SP APP INT direct False /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153 none 10/15/2021 00:05:15 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones Landing Zones inherited Tenant Reader acdd72a7-3385-48ef-bd42-f606fba81ae7 Builtin false False Preston Parsard [MSFT] prestopa_microsoft.com#EXT#@autocloudarcm365.onmicrosoft.com 6384d11f-f8fa-4b62-b475-943fc13cbf8a User Guest direct False /providers/microsoft.authorization/roleassignments/49df53fb-9a72-41c7-9e29-8e9a9d08e934 none 01/25/2022 23:43:33 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones Landing Zones inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 05fc20b8-3126-42c7-82d5-beeabe6283ca Unknown direct False /providers/microsoft.authorization/roleassignments/78c99b5c-f9ff-47e7-8b19-261a31981dc1 none 01/12/2022 19:37:04 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones Landing Zones inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False prj-001-aaa-01 n/a 39523274-e37f-4043-a479-0304266fe06a SP MI Sys direct False /providers/microsoft.authorization/roleassignments/51a31262-cc3f-4cfd-948e-0fd0239807b1 none 01/19/2022 21:27:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones Landing Zones inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 80bdde2b-cdea-4f5a-b948-3acec376f45b Unknown direct False /providers/microsoft.authorization/roleassignments/1810e41e-df60-4178-8c74-6ea2fec00a8a none 01/12/2022 00:11:41 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones Landing Zones inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct False /providers/microsoft.authorization/roleassignments/890aafc2-324a-4f6a-a40a-3fb501e8a0de none 12/30/2021 21:45:18 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones Landing Zones inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a d15b328a-6901-4188-ab78-ee7131537c0f Unknown direct False /providers/microsoft.authorization/roleassignments/9ce51771-571b-4aba-8a8b-1a869ff15a27 none 01/12/2022 21:05:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones Landing Zones inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a debc9698-190e-497c-a00b-82dc86701bd6 Unknown direct False /providers/microsoft.authorization/roleassignments/76765ae0-5721-47e6-88c1-c31983d77068 none 01/12/2022 17:59:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Mg alz-landingzones Landing Zones thisScope MG Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz-landingzones/providers/microsoft.authorization/roleassignments/c7c07346-d6d5-41a0-b253-dfcc55072f48 none 03/10/2022 10:48:03 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg alz-platform Platform inherited alz Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 none 03/10/2022 10:47:40 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Ten alz-platform Platform inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct False /providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706 none 12/31/2021 01:33:57 ObjectType: User Member; ObjectDisplayName: Preston Parsard [AUTO]; ObjectSignInName: autocloudarc@autocloudarcm365.onmicrosoft.com; ObjectId: 289bfa7f-6c28-4240-aa52-dd105c74642d
Ten alz-platform Platform inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct False /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877 none 01/25/2022 23:38:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform Platform inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e none 03/09/2022 00:40:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform Platform inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct False /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7 none 12/31/2021 01:39:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform Platform inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct False /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d none 08/02/2021 00:08:37 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform Platform inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct False /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d none 01/07/2022 00:19:25 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform Platform inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True AzOps n/a c426abf5-3e4d-48a0-8856-a5f9cfb4c10b SP APP INT direct False /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153 none 10/15/2021 00:05:15 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform Platform inherited Tenant Reader acdd72a7-3385-48ef-bd42-f606fba81ae7 Builtin false False Preston Parsard [MSFT] prestopa_microsoft.com#EXT#@autocloudarcm365.onmicrosoft.com 6384d11f-f8fa-4b62-b475-943fc13cbf8a User Guest direct False /providers/microsoft.authorization/roleassignments/49df53fb-9a72-41c7-9e29-8e9a9d08e934 none 01/25/2022 23:43:33 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform Platform inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 05fc20b8-3126-42c7-82d5-beeabe6283ca Unknown direct False /providers/microsoft.authorization/roleassignments/78c99b5c-f9ff-47e7-8b19-261a31981dc1 none 01/12/2022 19:37:04 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform Platform inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False prj-001-aaa-01 n/a 39523274-e37f-4043-a479-0304266fe06a SP MI Sys direct False /providers/microsoft.authorization/roleassignments/51a31262-cc3f-4cfd-948e-0fd0239807b1 none 01/19/2022 21:27:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform Platform inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 80bdde2b-cdea-4f5a-b948-3acec376f45b Unknown direct False /providers/microsoft.authorization/roleassignments/1810e41e-df60-4178-8c74-6ea2fec00a8a none 01/12/2022 00:11:41 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform Platform inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct False /providers/microsoft.authorization/roleassignments/890aafc2-324a-4f6a-a40a-3fb501e8a0de none 12/30/2021 21:45:18 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform Platform inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a d15b328a-6901-4188-ab78-ee7131537c0f Unknown direct False /providers/microsoft.authorization/roleassignments/9ce51771-571b-4aba-8a8b-1a869ff15a27 none 01/12/2022 21:05:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform Platform inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a debc9698-190e-497c-a00b-82dc86701bd6 Unknown direct False /providers/microsoft.authorization/roleassignments/76765ae0-5721-47e6-88c1-c31983d77068 none 01/12/2022 17:59:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Mg alz-platform Platform thisScope MG Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz-platform/providers/microsoft.authorization/roleassignments/64677d6a-3574-4abd-a351-5ad5dc1da7c7 none 03/10/2022 10:48:02 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg alz-sandbox Sandbox inherited alz Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 none 03/10/2022 10:47:40 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Ten alz-sandbox Sandbox inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct False /providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706 none 12/31/2021 01:33:57 ObjectType: User Member; ObjectDisplayName: Preston Parsard [AUTO]; ObjectSignInName: autocloudarc@autocloudarcm365.onmicrosoft.com; ObjectId: 289bfa7f-6c28-4240-aa52-dd105c74642d
Ten alz-sandbox Sandbox inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct False /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877 none 01/25/2022 23:38:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-sandbox Sandbox inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e none 03/09/2022 00:40:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-sandbox Sandbox inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct False /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7 none 12/31/2021 01:39:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-sandbox Sandbox inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct False /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d none 08/02/2021 00:08:37 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-sandbox Sandbox inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct False /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d none 01/07/2022 00:19:25 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-sandbox Sandbox inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True AzOps n/a c426abf5-3e4d-48a0-8856-a5f9cfb4c10b SP APP INT direct False /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153 none 10/15/2021 00:05:15 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-sandbox Sandbox inherited Tenant Reader acdd72a7-3385-48ef-bd42-f606fba81ae7 Builtin false False Preston Parsard [MSFT] prestopa_microsoft.com#EXT#@autocloudarcm365.onmicrosoft.com 6384d11f-f8fa-4b62-b475-943fc13cbf8a User Guest direct False /providers/microsoft.authorization/roleassignments/49df53fb-9a72-41c7-9e29-8e9a9d08e934 none 01/25/2022 23:43:33 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-sandbox Sandbox inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 05fc20b8-3126-42c7-82d5-beeabe6283ca Unknown direct False /providers/microsoft.authorization/roleassignments/78c99b5c-f9ff-47e7-8b19-261a31981dc1 none 01/12/2022 19:37:04 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-sandbox Sandbox inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False prj-001-aaa-01 n/a 39523274-e37f-4043-a479-0304266fe06a SP MI Sys direct False /providers/microsoft.authorization/roleassignments/51a31262-cc3f-4cfd-948e-0fd0239807b1 none 01/19/2022 21:27:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-sandbox Sandbox inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 80bdde2b-cdea-4f5a-b948-3acec376f45b Unknown direct False /providers/microsoft.authorization/roleassignments/1810e41e-df60-4178-8c74-6ea2fec00a8a none 01/12/2022 00:11:41 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-sandbox Sandbox inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct False /providers/microsoft.authorization/roleassignments/890aafc2-324a-4f6a-a40a-3fb501e8a0de none 12/30/2021 21:45:18 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-sandbox Sandbox inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a d15b328a-6901-4188-ab78-ee7131537c0f Unknown direct False /providers/microsoft.authorization/roleassignments/9ce51771-571b-4aba-8a8b-1a869ff15a27 none 01/12/2022 21:05:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-sandbox Sandbox inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a debc9698-190e-497c-a00b-82dc86701bd6 Unknown direct False /providers/microsoft.authorization/roleassignments/76765ae0-5721-47e6-88c1-c31983d77068 none 01/12/2022 17:59:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Mg alz-sandbox Sandbox thisScope MG Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz-sandbox/providers/microsoft.authorization/roleassignments/08749dc1-4bc8-4d50-aa00-0aa45e8bd443 none 03/10/2022 10:48:02 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg alz-platform-connectivity Connectivity inherited alz Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 none 03/10/2022 10:47:40 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg alz-platform-connectivity Connectivity inherited alz-platform Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz-platform/providers/microsoft.authorization/roleassignments/64677d6a-3574-4abd-a351-5ad5dc1da7c7 none 03/10/2022 10:48:02 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Ten alz-platform-connectivity Connectivity inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct False /providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706 none 12/31/2021 01:33:57 ObjectType: User Member; ObjectDisplayName: Preston Parsard [AUTO]; ObjectSignInName: autocloudarc@autocloudarcm365.onmicrosoft.com; ObjectId: 289bfa7f-6c28-4240-aa52-dd105c74642d
Ten alz-platform-connectivity Connectivity inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct False /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877 none 01/25/2022 23:38:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-connectivity Connectivity inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e none 03/09/2022 00:40:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-connectivity Connectivity inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct False /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7 none 12/31/2021 01:39:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-connectivity Connectivity inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct False /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d none 08/02/2021 00:08:37 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-connectivity Connectivity inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct False /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d none 01/07/2022 00:19:25 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-connectivity Connectivity inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True AzOps n/a c426abf5-3e4d-48a0-8856-a5f9cfb4c10b SP APP INT direct False /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153 none 10/15/2021 00:05:15 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-connectivity Connectivity inherited Tenant Reader acdd72a7-3385-48ef-bd42-f606fba81ae7 Builtin false False Preston Parsard [MSFT] prestopa_microsoft.com#EXT#@autocloudarcm365.onmicrosoft.com 6384d11f-f8fa-4b62-b475-943fc13cbf8a User Guest direct False /providers/microsoft.authorization/roleassignments/49df53fb-9a72-41c7-9e29-8e9a9d08e934 none 01/25/2022 23:43:33 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-connectivity Connectivity inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 05fc20b8-3126-42c7-82d5-beeabe6283ca Unknown direct False /providers/microsoft.authorization/roleassignments/78c99b5c-f9ff-47e7-8b19-261a31981dc1 none 01/12/2022 19:37:04 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-connectivity Connectivity inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False prj-001-aaa-01 n/a 39523274-e37f-4043-a479-0304266fe06a SP MI Sys direct False /providers/microsoft.authorization/roleassignments/51a31262-cc3f-4cfd-948e-0fd0239807b1 none 01/19/2022 21:27:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-connectivity Connectivity inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 80bdde2b-cdea-4f5a-b948-3acec376f45b Unknown direct False /providers/microsoft.authorization/roleassignments/1810e41e-df60-4178-8c74-6ea2fec00a8a none 01/12/2022 00:11:41 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-connectivity Connectivity inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct False /providers/microsoft.authorization/roleassignments/890aafc2-324a-4f6a-a40a-3fb501e8a0de none 12/30/2021 21:45:18 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-connectivity Connectivity inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a d15b328a-6901-4188-ab78-ee7131537c0f Unknown direct False /providers/microsoft.authorization/roleassignments/9ce51771-571b-4aba-8a8b-1a869ff15a27 none 01/12/2022 21:05:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-connectivity Connectivity inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a debc9698-190e-497c-a00b-82dc86701bd6 Unknown direct False /providers/microsoft.authorization/roleassignments/76765ae0-5721-47e6-88c1-c31983d77068 none 01/12/2022 17:59:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Mg alz-platform-connectivity Connectivity thisScope MG Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz-platform-connectivity/providers/microsoft.authorization/roleassignments/80962acc-cc5c-4eaa-b2bd-f5c567c22766 none 03/10/2022 10:48:25 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg alz-landingzones-corp Corp inherited alz Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 none 03/10/2022 10:47:40 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg alz-landingzones-corp Corp inherited alz-landingzones Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz-landingzones/providers/microsoft.authorization/roleassignments/c7c07346-d6d5-41a0-b253-dfcc55072f48 none 03/10/2022 10:48:03 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Ten alz-landingzones-corp Corp inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct False /providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706 none 12/31/2021 01:33:57 ObjectType: User Member; ObjectDisplayName: Preston Parsard [AUTO]; ObjectSignInName: autocloudarc@autocloudarcm365.onmicrosoft.com; ObjectId: 289bfa7f-6c28-4240-aa52-dd105c74642d
Ten alz-landingzones-corp Corp inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct False /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877 none 01/25/2022 23:38:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-corp Corp inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e none 03/09/2022 00:40:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-corp Corp inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct False /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7 none 12/31/2021 01:39:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-corp Corp inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct False /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d none 08/02/2021 00:08:37 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-corp Corp inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct False /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d none 01/07/2022 00:19:25 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-corp Corp inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True AzOps n/a c426abf5-3e4d-48a0-8856-a5f9cfb4c10b SP APP INT direct False /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153 none 10/15/2021 00:05:15 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-corp Corp inherited Tenant Reader acdd72a7-3385-48ef-bd42-f606fba81ae7 Builtin false False Preston Parsard [MSFT] prestopa_microsoft.com#EXT#@autocloudarcm365.onmicrosoft.com 6384d11f-f8fa-4b62-b475-943fc13cbf8a User Guest direct False /providers/microsoft.authorization/roleassignments/49df53fb-9a72-41c7-9e29-8e9a9d08e934 none 01/25/2022 23:43:33 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-corp Corp inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 05fc20b8-3126-42c7-82d5-beeabe6283ca Unknown direct False /providers/microsoft.authorization/roleassignments/78c99b5c-f9ff-47e7-8b19-261a31981dc1 none 01/12/2022 19:37:04 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-corp Corp inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False prj-001-aaa-01 n/a 39523274-e37f-4043-a479-0304266fe06a SP MI Sys direct False /providers/microsoft.authorization/roleassignments/51a31262-cc3f-4cfd-948e-0fd0239807b1 none 01/19/2022 21:27:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-corp Corp inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 80bdde2b-cdea-4f5a-b948-3acec376f45b Unknown direct False /providers/microsoft.authorization/roleassignments/1810e41e-df60-4178-8c74-6ea2fec00a8a none 01/12/2022 00:11:41 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-corp Corp inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct False /providers/microsoft.authorization/roleassignments/890aafc2-324a-4f6a-a40a-3fb501e8a0de none 12/30/2021 21:45:18 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-corp Corp inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a d15b328a-6901-4188-ab78-ee7131537c0f Unknown direct False /providers/microsoft.authorization/roleassignments/9ce51771-571b-4aba-8a8b-1a869ff15a27 none 01/12/2022 21:05:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-corp Corp inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a debc9698-190e-497c-a00b-82dc86701bd6 Unknown direct False /providers/microsoft.authorization/roleassignments/76765ae0-5721-47e6-88c1-c31983d77068 none 01/12/2022 17:59:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Mg alz-landingzones-corp Corp thisScope MG Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz-landingzones-corp/providers/microsoft.authorization/roleassignments/b706c72d-88d9-449b-9814-bb832b53e7f0 none 03/10/2022 10:48:25 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg alz-platform-identity Identity inherited alz Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 none 03/10/2022 10:47:40 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg alz-platform-identity Identity inherited alz-platform Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz-platform/providers/microsoft.authorization/roleassignments/64677d6a-3574-4abd-a351-5ad5dc1da7c7 none 03/10/2022 10:48:02 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Ten alz-platform-identity Identity inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct False /providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706 none 12/31/2021 01:33:57 ObjectType: User Member; ObjectDisplayName: Preston Parsard [AUTO]; ObjectSignInName: autocloudarc@autocloudarcm365.onmicrosoft.com; ObjectId: 289bfa7f-6c28-4240-aa52-dd105c74642d
Ten alz-platform-identity Identity inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct False /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877 none 01/25/2022 23:38:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-identity Identity inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e none 03/09/2022 00:40:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-identity Identity inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct False /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7 none 12/31/2021 01:39:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-identity Identity inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct False /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d none 08/02/2021 00:08:37 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-identity Identity inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct False /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d none 01/07/2022 00:19:25 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-identity Identity inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True AzOps n/a c426abf5-3e4d-48a0-8856-a5f9cfb4c10b SP APP INT direct False /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153 none 10/15/2021 00:05:15 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-identity Identity inherited Tenant Reader acdd72a7-3385-48ef-bd42-f606fba81ae7 Builtin false False Preston Parsard [MSFT] prestopa_microsoft.com#EXT#@autocloudarcm365.onmicrosoft.com 6384d11f-f8fa-4b62-b475-943fc13cbf8a User Guest direct False /providers/microsoft.authorization/roleassignments/49df53fb-9a72-41c7-9e29-8e9a9d08e934 none 01/25/2022 23:43:33 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-identity Identity inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 05fc20b8-3126-42c7-82d5-beeabe6283ca Unknown direct False /providers/microsoft.authorization/roleassignments/78c99b5c-f9ff-47e7-8b19-261a31981dc1 none 01/12/2022 19:37:04 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-identity Identity inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False prj-001-aaa-01 n/a 39523274-e37f-4043-a479-0304266fe06a SP MI Sys direct False /providers/microsoft.authorization/roleassignments/51a31262-cc3f-4cfd-948e-0fd0239807b1 none 01/19/2022 21:27:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-identity Identity inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 80bdde2b-cdea-4f5a-b948-3acec376f45b Unknown direct False /providers/microsoft.authorization/roleassignments/1810e41e-df60-4178-8c74-6ea2fec00a8a none 01/12/2022 00:11:41 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-identity Identity inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct False /providers/microsoft.authorization/roleassignments/890aafc2-324a-4f6a-a40a-3fb501e8a0de none 12/30/2021 21:45:18 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-identity Identity inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a d15b328a-6901-4188-ab78-ee7131537c0f Unknown direct False /providers/microsoft.authorization/roleassignments/9ce51771-571b-4aba-8a8b-1a869ff15a27 none 01/12/2022 21:05:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-identity Identity inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a debc9698-190e-497c-a00b-82dc86701bd6 Unknown direct False /providers/microsoft.authorization/roleassignments/76765ae0-5721-47e6-88c1-c31983d77068 none 01/12/2022 17:59:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Mg alz-platform-identity Identity thisScope MG Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz-platform-identity/providers/microsoft.authorization/roleassignments/72412164-1650-4110-aaf1-708631c37efb none 03/10/2022 10:48:26 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg alz-platform-management Management inherited alz Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 none 03/10/2022 10:47:40 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg alz-platform-management Management inherited alz-platform Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz-platform/providers/microsoft.authorization/roleassignments/64677d6a-3574-4abd-a351-5ad5dc1da7c7 none 03/10/2022 10:48:02 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Ten alz-platform-management Management inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct False /providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706 none 12/31/2021 01:33:57 ObjectType: User Member; ObjectDisplayName: Preston Parsard [AUTO]; ObjectSignInName: autocloudarc@autocloudarcm365.onmicrosoft.com; ObjectId: 289bfa7f-6c28-4240-aa52-dd105c74642d
Ten alz-platform-management Management inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct False /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877 none 01/25/2022 23:38:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-management Management inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e none 03/09/2022 00:40:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-management Management inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct False /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7 none 12/31/2021 01:39:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-management Management inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct False /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d none 08/02/2021 00:08:37 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-management Management inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct False /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d none 01/07/2022 00:19:25 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-management Management inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True AzOps n/a c426abf5-3e4d-48a0-8856-a5f9cfb4c10b SP APP INT direct False /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153 none 10/15/2021 00:05:15 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-management Management inherited Tenant Reader acdd72a7-3385-48ef-bd42-f606fba81ae7 Builtin false False Preston Parsard [MSFT] prestopa_microsoft.com#EXT#@autocloudarcm365.onmicrosoft.com 6384d11f-f8fa-4b62-b475-943fc13cbf8a User Guest direct False /providers/microsoft.authorization/roleassignments/49df53fb-9a72-41c7-9e29-8e9a9d08e934 none 01/25/2022 23:43:33 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-management Management inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 05fc20b8-3126-42c7-82d5-beeabe6283ca Unknown direct False /providers/microsoft.authorization/roleassignments/78c99b5c-f9ff-47e7-8b19-261a31981dc1 none 01/12/2022 19:37:04 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-management Management inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False prj-001-aaa-01 n/a 39523274-e37f-4043-a479-0304266fe06a SP MI Sys direct False /providers/microsoft.authorization/roleassignments/51a31262-cc3f-4cfd-948e-0fd0239807b1 none 01/19/2022 21:27:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-management Management inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 80bdde2b-cdea-4f5a-b948-3acec376f45b Unknown direct False /providers/microsoft.authorization/roleassignments/1810e41e-df60-4178-8c74-6ea2fec00a8a none 01/12/2022 00:11:41 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-management Management inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct False /providers/microsoft.authorization/roleassignments/890aafc2-324a-4f6a-a40a-3fb501e8a0de none 12/30/2021 21:45:18 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-management Management inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a d15b328a-6901-4188-ab78-ee7131537c0f Unknown direct False /providers/microsoft.authorization/roleassignments/9ce51771-571b-4aba-8a8b-1a869ff15a27 none 01/12/2022 21:05:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-platform-management Management inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a debc9698-190e-497c-a00b-82dc86701bd6 Unknown direct False /providers/microsoft.authorization/roleassignments/76765ae0-5721-47e6-88c1-c31983d77068 none 01/12/2022 17:59:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Mg alz-platform-management Management thisScope MG Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz-platform-management/providers/microsoft.authorization/roleassignments/cfa9db8a-5ab9-474d-8daf-6a484895b1b3 none 03/10/2022 10:48:26 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg alz-landingzones-online Online inherited alz Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 none 03/10/2022 10:47:40 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg alz-landingzones-online Online inherited alz-landingzones Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz-landingzones/providers/microsoft.authorization/roleassignments/c7c07346-d6d5-41a0-b253-dfcc55072f48 none 03/10/2022 10:48:03 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Ten alz-landingzones-online Online inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct False /providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706 none 12/31/2021 01:33:57 ObjectType: User Member; ObjectDisplayName: Preston Parsard [AUTO]; ObjectSignInName: autocloudarc@autocloudarcm365.onmicrosoft.com; ObjectId: 289bfa7f-6c28-4240-aa52-dd105c74642d
Ten alz-landingzones-online Online inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct False /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877 none 01/25/2022 23:38:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-online Online inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e none 03/09/2022 00:40:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-online Online inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct False /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7 none 12/31/2021 01:39:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-online Online inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct False /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d none 08/02/2021 00:08:37 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-online Online inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct False /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d none 01/07/2022 00:19:25 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-online Online inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True AzOps n/a c426abf5-3e4d-48a0-8856-a5f9cfb4c10b SP APP INT direct False /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153 none 10/15/2021 00:05:15 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-online Online inherited Tenant Reader acdd72a7-3385-48ef-bd42-f606fba81ae7 Builtin false False Preston Parsard [MSFT] prestopa_microsoft.com#EXT#@autocloudarcm365.onmicrosoft.com 6384d11f-f8fa-4b62-b475-943fc13cbf8a User Guest direct False /providers/microsoft.authorization/roleassignments/49df53fb-9a72-41c7-9e29-8e9a9d08e934 none 01/25/2022 23:43:33 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-online Online inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 05fc20b8-3126-42c7-82d5-beeabe6283ca Unknown direct False /providers/microsoft.authorization/roleassignments/78c99b5c-f9ff-47e7-8b19-261a31981dc1 none 01/12/2022 19:37:04 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-online Online inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False prj-001-aaa-01 n/a 39523274-e37f-4043-a479-0304266fe06a SP MI Sys direct False /providers/microsoft.authorization/roleassignments/51a31262-cc3f-4cfd-948e-0fd0239807b1 none 01/19/2022 21:27:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-online Online inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 80bdde2b-cdea-4f5a-b948-3acec376f45b Unknown direct False /providers/microsoft.authorization/roleassignments/1810e41e-df60-4178-8c74-6ea2fec00a8a none 01/12/2022 00:11:41 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-online Online inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct False /providers/microsoft.authorization/roleassignments/890aafc2-324a-4f6a-a40a-3fb501e8a0de none 12/30/2021 21:45:18 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-online Online inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a d15b328a-6901-4188-ab78-ee7131537c0f Unknown direct False /providers/microsoft.authorization/roleassignments/9ce51771-571b-4aba-8a8b-1a869ff15a27 none 01/12/2022 21:05:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Ten alz-landingzones-online Online inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a debc9698-190e-497c-a00b-82dc86701bd6 Unknown direct False /providers/microsoft.authorization/roleassignments/76765ae0-5721-47e6-88c1-c31983d77068 none 01/12/2022 17:59:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
Mg alz-landingzones-online Online thisScope MG Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct False /providers/microsoft.management/managementgroups/alz-landingzones-online/providers/microsoft.authorization/roleassignments/dd120953-11ae-4f10-8856-49e430d1111d none 03/10/2022 10:48:25 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)

0 Custom Role definitions Owner permissions (ManagementGroup 'alz' and descendants wide)

Download CSV semicolon | comma
Role Name RoleId Type Role assignments Assignable Scopes
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 BuiltIn 15 (/providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e, /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d, /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153, /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7, /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d, /providers/microsoft.management/managementgroups/alz-decommissioned/providers/microsoft.authorization/roleassignments/a2474fb8-5d7f-4d9a-9646-363d798b25f7, /providers/microsoft.management/managementgroups/alz-landingzones-corp/providers/microsoft.authorization/roleassignments/b706c72d-88d9-449b-9814-bb832b53e7f0, /providers/microsoft.management/managementgroups/alz-landingzones-online/providers/microsoft.authorization/roleassignments/dd120953-11ae-4f10-8856-49e430d1111d, /providers/microsoft.management/managementgroups/alz-landingzones/providers/microsoft.authorization/roleassignments/c7c07346-d6d5-41a0-b253-dfcc55072f48, /providers/microsoft.management/managementgroups/alz-platform-connectivity/providers/microsoft.authorization/roleassignments/80962acc-cc5c-4eaa-b2bd-f5c567c22766, /providers/microsoft.management/managementgroups/alz-platform-identity/providers/microsoft.authorization/roleassignments/72412164-1650-4110-aaf1-708631c37efb, /providers/microsoft.management/managementgroups/alz-platform-management/providers/microsoft.authorization/roleassignments/cfa9db8a-5ab9-474d-8daf-6a484895b1b3, /providers/microsoft.management/managementgroups/alz-platform/providers/microsoft.authorization/roleassignments/64677d6a-3574-4abd-a351-5ad5dc1da7c7, /providers/microsoft.management/managementgroups/alz-sandbox/providers/microsoft.authorization/roleassignments/08749dc1-4bc8-4d50-aa00-0aa45e8bd443, /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4)
User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 BuiltIn 2 (/providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706, /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877)
Download CSV semicolon | comma
Role Name RoleId Role Assignment ServicePrincipal (ObjId) Impacted Mg/Sub
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e spn-alz-accelerator-11 (07390265-aba8-4f54-8a36-db57e2c11574) Mg: 10; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d azr-dev-0072-aaa-01 (c1a110d4-e5cb-42f4-bad5-8f74cac58673) Mg: 10; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153 AzOps (c426abf5-3e4d-48a0-8856-a5f9cfb4c10b) Mg: 10; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.management/managementgroups/alz-decommissioned/providers/microsoft.authorization/roleassignments/a2474fb8-5d7f-4d9a-9646-363d798b25f7 spn-alz-accelerator-11 (07390265-aba8-4f54-8a36-db57e2c11574) Mg: 1; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.management/managementgroups/alz-landingzones-corp/providers/microsoft.authorization/roleassignments/b706c72d-88d9-449b-9814-bb832b53e7f0 spn-alz-accelerator-11 (07390265-aba8-4f54-8a36-db57e2c11574) Mg: 1; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.management/managementgroups/alz-landingzones-online/providers/microsoft.authorization/roleassignments/dd120953-11ae-4f10-8856-49e430d1111d spn-alz-accelerator-11 (07390265-aba8-4f54-8a36-db57e2c11574) Mg: 1; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.management/managementgroups/alz-landingzones/providers/microsoft.authorization/roleassignments/c7c07346-d6d5-41a0-b253-dfcc55072f48 spn-alz-accelerator-11 (07390265-aba8-4f54-8a36-db57e2c11574) Mg: 3; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.management/managementgroups/alz-platform-connectivity/providers/microsoft.authorization/roleassignments/80962acc-cc5c-4eaa-b2bd-f5c567c22766 spn-alz-accelerator-11 (07390265-aba8-4f54-8a36-db57e2c11574) Mg: 1; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.management/managementgroups/alz-platform-identity/providers/microsoft.authorization/roleassignments/72412164-1650-4110-aaf1-708631c37efb spn-alz-accelerator-11 (07390265-aba8-4f54-8a36-db57e2c11574) Mg: 1; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.management/managementgroups/alz-platform-management/providers/microsoft.authorization/roleassignments/cfa9db8a-5ab9-474d-8daf-6a484895b1b3 spn-alz-accelerator-11 (07390265-aba8-4f54-8a36-db57e2c11574) Mg: 1; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.management/managementgroups/alz-platform/providers/microsoft.authorization/roleassignments/64677d6a-3574-4abd-a351-5ad5dc1da7c7 spn-alz-accelerator-11 (07390265-aba8-4f54-8a36-db57e2c11574) Mg: 4; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.management/managementgroups/alz-sandbox/providers/microsoft.authorization/roleassignments/08749dc1-4bc8-4d50-aa00-0aa45e8bd443 spn-alz-accelerator-11 (07390265-aba8-4f54-8a36-db57e2c11574) Mg: 1; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 spn-alz-accelerator-11 (07390265-aba8-4f54-8a36-db57e2c11574) Mg: 10; Sub: 0
Download CSV semicolon | comma
Role Name RoleId Role Assignment Obj Type Obj DisplayName Obj SignInName ObjId Impacted Mg/Sub
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e ServicePrincipal spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 Mg: 10; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d ServicePrincipal azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 Mg: 10; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153 ServicePrincipal AzOps n/a c426abf5-3e4d-48a0-8856-a5f9cfb4c10b Mg: 10; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7 User Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d Mg: 10; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d User Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 Mg: 10; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.management/managementgroups/alz-decommissioned/providers/microsoft.authorization/roleassignments/a2474fb8-5d7f-4d9a-9646-363d798b25f7 ServicePrincipal spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 Mg: 1; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.management/managementgroups/alz-landingzones-corp/providers/microsoft.authorization/roleassignments/b706c72d-88d9-449b-9814-bb832b53e7f0 ServicePrincipal spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 Mg: 1; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.management/managementgroups/alz-landingzones-online/providers/microsoft.authorization/roleassignments/dd120953-11ae-4f10-8856-49e430d1111d ServicePrincipal spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 Mg: 1; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.management/managementgroups/alz-landingzones/providers/microsoft.authorization/roleassignments/c7c07346-d6d5-41a0-b253-dfcc55072f48 ServicePrincipal spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 Mg: 3; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.management/managementgroups/alz-platform-connectivity/providers/microsoft.authorization/roleassignments/80962acc-cc5c-4eaa-b2bd-f5c567c22766 ServicePrincipal spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 Mg: 1; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.management/managementgroups/alz-platform-identity/providers/microsoft.authorization/roleassignments/72412164-1650-4110-aaf1-708631c37efb ServicePrincipal spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 Mg: 1; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.management/managementgroups/alz-platform-management/providers/microsoft.authorization/roleassignments/cfa9db8a-5ab9-474d-8daf-6a484895b1b3 ServicePrincipal spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 Mg: 1; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.management/managementgroups/alz-platform/providers/microsoft.authorization/roleassignments/64677d6a-3574-4abd-a351-5ad5dc1da7c7 ServicePrincipal spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 Mg: 4; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.management/managementgroups/alz-sandbox/providers/microsoft.authorization/roleassignments/08749dc1-4bc8-4d50-aa00-0aa45e8bd443 ServicePrincipal spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 Mg: 1; Sub: 0
Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 ServicePrincipal spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 Mg: 10; Sub: 0
Download CSV semicolon | comma
Role Name RoleId Role Assignment Obj Type Obj DisplayName Obj SignInName ObjId Impacted Mg/Sub
User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 /providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706 User Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d Mg: 10; Sub: 0
User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877 User Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 Mg: 10; Sub: 0
Download CSV semicolon | comma
Role Name RoleId Role Assignment Obj Type Obj DisplayName Obj SignInName ObjId Assignment direct/indirect
<a class="externallink" href="https://www.azadvertizer.net/azrolesadvertizer/8e3af657-a8ff-443c-a75c-2fe8c4bcb635.html" target="_blank" rel="noopener">Owner</a> 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d User Guest Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 direct
<a class="externallink" href="https://www.azadvertizer.net/azrolesadvertizer/18d7d88d-d35e-4fb5-a5c3-7773c20a72d9.html" target="_blank" rel="noopener">User Access Administrator</a> 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877 User Guest Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 direct

0 Blueprint definitions

0 Blueprint assignments

0 Orphaned Blueprint definitions

Download CSV semicolon | comma
Level ManagementGroup ManagementGroup Id Mg children (total) Mg children (direct) Sub children (total) Sub children (direct) MG MDfC Score Path
0 -1 0 0 0 n/a
1 Azure Landing Zones alz 9 4 0 0 n/a 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz
2 Decommissioned alz-decommissioned 0 0 0 0 n/a 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-decommissioned
2 Landing Zones alz-landingzones 2 2 0 0 n/a 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-landingzones
2 Platform alz-platform 3 3 0 0 n/a 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-platform
2 Sandbox alz-sandbox 0 0 0 0 n/a 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-sandbox
3 Corp alz-landingzones-corp 0 0 0 0 n/a 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-landingzones/alz-landingzones-corp
3 Online alz-landingzones-online 0 0 0 0 n/a 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-landingzones/alz-landingzones-online
3 Connectivity alz-platform-connectivity 0 0 0 0 n/a 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-platform/alz-platform-connectivity
3 Identity alz-platform-identity 0 0 0 0 n/a 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-platform/alz-platform-identity
3 Management alz-platform-management 0 0 0 0 n/a 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-platform/alz-platform-management

Hierarchy Settings | Default Management Group Id: 'Non-Standard-Subscriptions' docs

Hierarchy Settings | Require authorization for Management Group creation: 'False' docs

0 Subscriptions

0 Subscriptions out-of-scope

Tag Name Usage (0 Tags) docs

Resources (0 ResourceTypes)

Resources (0 ResourceTypes)

0 Resource Providers

0 Resource Providers

No Resource Locks at all docs

No Microsoft Defender for Cloud plans at all

No Microsoft Defender for Cloud plans at all

No UserAssigned Managed Identities assigned to Resources / vice versa - at all

Management Groups

No Management Groups configured for Diagnostic settings docs

Management Group Diagnostic Settings - Create Or Update - REST API docs
Download CSV semicolon | comma
Management Group Name Management Group Id Management Group path
Tenant Root Group 1561a00a-6d2f-4867-af27-c6bd5d016f7d 1561a00a-6d2f-4867-af27-c6bd5d016f7d
Azure Landing Zones alz 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz
Decommissioned alz-decommissioned 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-decommissioned
Landing Zones alz-landingzones 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-landingzones
Corp alz-landingzones-corp 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-landingzones/alz-landingzones-corp
Online alz-landingzones-online 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-landingzones/alz-landingzones-online
Platform alz-platform 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-platform
Connectivity alz-platform-connectivity 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-platform/alz-platform-connectivity
Identity alz-platform-identity 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-platform/alz-platform-identity
Management alz-platform-management 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-platform/alz-platform-management
Sandbox alz-sandbox 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-sandbox
Azure Landing Zones alz07 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz07
Landing Zones alz07-landingzones 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz07/alz07-landingzones
Corp alz07-landingzones-corp 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz07/alz07-landingzones/alz07-landingzones-corp
Online alz07-landingzones-online 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz07/alz07-landingzones/alz07-landingzones-online
Platform alz07-platform 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz07/alz07-platform
Connectivity alz07-platform-connectivity 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz07/alz07-platform/alz07-platform-connectivity
Identity alz07-platform-identity 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz07/alz07-platform/alz07-platform-identity
Management alz07-platform-management 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz07/alz07-platform/alz07-platform-management
Non Standard Subscriptions Non-Standard-Subscriptions 1561a00a-6d2f-4867-af27-c6bd5d016f7d/Non-Standard-Subscriptions

Subscriptions

No Subscriptions configured for Diagnostic settings docs

All Subscriptions are configured for Diagnostic settings docs

Resources

No Resources (1st party) Diagnostics capable

Create Custom Policies for Azure ResourceTypes that support Diagnostics Logs and Metrics Create-AzDiagPolicy
Supported categories for Azure Resource Logs docs
Priority Recommendation ResourceType Resource Count Diagnostics capable (logs) Policy Id Policy DisplayName Role definitions Target Log Categories not covered by Policy Policy assignments Policy used in PolicySet PolicySet assignments
4-Low no recommendation as this resourceType seems not existing Microsoft.AnalysisServices/servers 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-analysisservice Deploy Diagnostic Settings for Analysis Services to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.ApiManagement/service 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-apimgmt Deploy Diagnostic Settings for API Management to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.Automation/automationAccounts 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-aa Deploy Diagnostic Settings for Automation to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.Cdn/profiles/endpoints 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-cdnendpoints Deploy Diagnostic Settings for CDN Endpoint to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.CognitiveServices/accounts 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-cognitiveservices Deploy Diagnostic Settings for Cognitive Services to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.ContainerRegistry/registries 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-acr Deploy Diagnostic Settings for Container Registry to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.Databricks/workspaces 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-databricks Deploy Diagnostic Settings for Databricks to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.DataFactory/factories 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-datafactory Deploy Diagnostic Settings for Data Factory to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.DataLakeAnalytics/accounts 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-dlanalytics Deploy Diagnostic Settings for Data Lake Analytics to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.DBforMariaDB/servers 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mariadb Deploy Diagnostic Settings for MariaDB to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.DBforMySQL/servers 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mysql Deploy Diagnostic Settings for Database for MySQL to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.DBforPostgreSQL/servers 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-postgresql Deploy Diagnostic Settings for Database for PostgreSQL to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.DesktopVirtualization/applicationGroups 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-wvdappgroup Deploy Diagnostic Settings for WVD Application group to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.DesktopVirtualization/hostpools 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-wvdhostpools Deploy Diagnostic Settings for WVD Host Pools to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.DesktopVirtualization/workspaces 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-wvdworkspace Deploy Diagnostic Settings for WVD Workspace to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.Devices/IotHubs 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-iothub Deploy Diagnostic Settings for IoT Hub to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.DocumentDB/databaseAccounts 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-cosmosdb Deploy Diagnostic Settings for Cosmos DB to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.EventGrid/systemTopics 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-eventgridsystemtopic Deploy Diagnostic Settings for Event Grid System Topic to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.EventGrid/topics 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-eventgridtopic Deploy Diagnostic Settings for Event Grid Topic to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.HealthcareApis/services 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-apiforfhir Deploy Diagnostic Settings for Azure API for FHIR to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.Kusto/Clusters 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-dataexplorercluster Deploy Diagnostic Settings for Azure Data Explorer Cluster to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.Logic/integrationAccounts 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-logicappsise Deploy Diagnostic Settings for Logic Apps integration service environment to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.MachineLearningServices/workspaces 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mlworkspace Deploy Diagnostic Settings for Machine Learning workspace to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.Media/mediaServices 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mediaservice Deploy Diagnostic Settings for Azure Media Service to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.Network/applicationGateways 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-applicationgateway Deploy Diagnostic Settings for Application Gateway to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.Network/azureFirewalls 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-firewall Deploy Diagnostic Settings for Firewall to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.Network/expressRouteCircuits 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-expressroute Deploy Diagnostic Settings for ExpressRoute to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.Network/frontDoors 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-frontdoor Deploy Diagnostic Settings for Front Door to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.Network/loadBalancers 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-loadbalancer Deploy Diagnostic Settings for Load Balancer to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.Network/networkSecurityGroups 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-networksecuritygroups Deploy Diagnostic Settings for Network Security Groups to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.Network/trafficManagerProfiles 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-trafficmanager Deploy Diagnostic Settings for Traffic Manager to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.Network/virtualNetworkGateways 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-vnetgw Deploy Diagnostic Settings for VPN Gateway to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.Network/virtualNetworks 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-virtualnetwork Deploy Diagnostic Settings for Virtual Network to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.PowerBIDedicated/capacities 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-powerbiembedded Deploy Diagnostic Settings for Power BI Embedded to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.Relay/namespaces 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-relay Deploy Diagnostic Settings for Relay to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.SignalRService/SignalR 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-signalr Deploy Diagnostic Settings for SignalR to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.Sql/managedInstances 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-sqlmi Deploy Diagnostic Settings for SQL Managed Instances to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.TimeSeriesInsights/environments 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-timeseriesinsights Deploy Diagnostic Settings for Time Series Insights to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.Web/sites 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-website Deploy Diagnostic Settings for App Service to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0
4-Low no recommendation as this resourceType seems not existing Microsoft.Web/sites 0 unknown /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-function Deploy Diagnostic Settings for Azure Function App to Log Analytics workspace Monitoring Contributor (749f88d5-cbae-40b8-bcfc-e573ddc772fa); Log Analytics Contributor (92aaf0da-9dab-42b6-94a3-d43ce8d16293) LA n/a 0 1 [/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics (Deploy Diagnostic Settings to Azure Services)] 0

Tenant

PolicySet definitions: 7/2500 docs

Custom Role definitions: 4/5000 docs

Management Groups

0 Management Groups approaching Limit (200) for PolicyAssignment docs

0 Management Groups approaching Limit (500) for Policy Scope docs

0 Management Groups approaching Limit (200) for PolicySet Scope docs

0 Management Groups approaching Limit (500) for RoleAssignment docs

Subscriptions

0 Subscriptions approaching Limit (980) for ResourceGroups docs

0 Subscriptions approaching Limit (50) for Tags docs

0 Subscriptions approaching Limit (200) for PolicyAssignment docs

0 Subscriptions approaching Limit (500) for Policy Scope docs

0 Subscriptions approaching Limit (200) for PolicySet Scope docs

0 Subscriptions approaching Limit () for RoleAssignment docs

Check out AzADServicePrincipalInsights POC GitHub
Demystifying Service Principals - Managed Identities devBlogs
John Savill - Azure AD App Registrations, Enterprise Apps and Service Principals YouTube

No ServicePrincipals where the API returned 'Request_ResourceNotFound'

No Applications where the API returned 'Request_ResourceNotFound'

Download CSV semicolon | comma
ApplicationId DisplayName SP ObjectId Type Usage Usage info Policy assignment details Role assignments Assigned to resources Orphaned
079370f8-8afa-4992-b550-f339338d7c13 prj-001-aaa-01 39523274-e37f-4043-a479-0304266fe06a System assigned Microsoft.Automation/automationAccounts isExplicit=False, /subscriptions/5c5db896-e9c2-4568-ae10-ee946769310f/resourcegroups/prj-001-rgp-01/providers/Microsoft.Automation/automationAccounts/prj-001-aaa-01 n/a 1 (Contributor (/providers/microsoft.authorization/roleassignments/51a31262-cc3f-4cfd-948e-0fd0239807b1))
527cf6ef-270d-48ca-93a3-40542505e21c azr-dev-0072-aaa-01 c1a110d4-e5cb-42f4-bad5-8f74cac58673 System assigned Microsoft.Automation/automationAccounts isExplicit=False, /subscriptions/5c5db896-e9c2-4568-ae10-ee946769310f/resourcegroups/azr-dev-0072-rgp-01/providers/Microsoft.Automation/automationAccounts/azr-dev-0072-aaa-01 n/a 2 (Owner (/providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d), Contributor (/providers/microsoft.authorization/roleassignments/890aafc2-324a-4f6a-a40a-3fb501e8a0de))
Download CSV semicolon | comma
ApplicationId DisplayName Notes SP ObjectId App ObjectId Secrets Secrets expired Secrets expiry
<14d		 Secrets expiry
>14d & <2y		 Secrets expiry
>2y		 Certs Certs expired Certs expiry
<14d		 Certs expiry
>14d & <2y		 Certs expiry
>2y
fb7a64a1-f9d5-491d-8f9b-1de7883e0fba spn-alz-accelerator-11 07390265-aba8-4f54-8a36-db57e2c11574 0009d92a-1990-42ff-9154-1100439ae338 1 0 0 1 0 0 0 0 0 0
67c5842e-9785-44a3-8a2b-5fc09e4b7d27 AzOps c426abf5-3e4d-48a0-8856-a5f9cfb4c10b 8715b751-adf9-4fa7-9a94-6987c22511b0 1 0 0 1 0 0 0 0 0 0

0 External (appOwnerOrganizationId) AAD ServicePrincipals type=Application

Customize your Azure environment optimizations (Cost, Reliability & more) with Azure Optimization Engine (AOE)

No information on Consumption as switch parameter -DoAzureConsumption was not applied

Download CSV semicolon | comma
Scope Scope Id Policy DisplayName PolicyId Category Effect Role definitions Unique assignments Used in PolicySets Created/Updated CreatedOn CreatedBy UpdatedOn UpdatedBy
Mg alz Deploy Diagnostic Settings for API Management to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-apimgmt Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy a route table with specific user defined routes /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-custom-route-table Network Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Network Contributor 0 0 Created&Updated 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy an Azure DDoS Protection Standard plan /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-ddosprotection Network Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Network Contributor 0 0 Created&Updated 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Azure Security Center Security Contacts /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-asc-securitycontacts Security Center Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Security Admin 0 1 (Deploy Microsoft Defender for Cloud configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-mdfc-config)) Created&Updated 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Event Grid subscriptions to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-eventgridsub Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz SQL Managed Instance should have the minimal TLS version set to the highest version /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-sqlmi-mintls SQL Default: Audit; Allowed: Audit,Disabled,Deny n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) Created&Updated 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Function App should only be accessible over HTTPS /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-appservicefunctionapp-http App Service Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) Created&Updated 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Azure Cache for Redis Append a specific min TLS version requirement and enforce TLS. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-redis-sslenforcement Cache Default: Append; Allowed: Append,Disabled n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) Created&Updated 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for IoT Hub to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-iothub Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:04 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for WVD Application group to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-wvdappgroup Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Azure Database for PostgreSQL server deploy a specific min TLS version requirement and enforce SSL /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-postgresql-sslenforcement SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Owner 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) Created&Updated 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Virtual Network to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-virtualnetwork Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy a default budget on all subscriptions under the assigned scope /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-budget Budget Default: DeployIfNotExists; Allowed: DeployIfNotExists,AuditIfNotExists,Disabled Contributor 0 0 Created&Updated 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Cognitive Services to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-cognitiveservices Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:58 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Network Security Groups to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-networksecuritygroups Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz API App should only be accessible over HTTPS /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-appserviceapiapp-http App Service Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Virtual Machines to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-vm Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny vNet peering cross subscription. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-vnet-peer-cross-sub Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Azure Database for MySQL server deploy a specific min TLS version and enforce SSL. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-mysql-sslenforcement SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Owner 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Storage Account set to minumum TLS and Secure transfer should be enabled /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-storage-mintls Storage Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny public acces behind vnet to Azure Machine Learning workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-publicaccesswhenbehindvnet Machine Learning Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Azure Media Service to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mediaservice Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for SignalR to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-signalr Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Limit allowed vm sizes for Azure Machine Learning compute clusters and compute instances /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-compute-vmsize Budget Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny Databricks workspaces without Vnet injection /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-databricks-virtualnetwork Databricks Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Traffic Manager to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-trafficmanager Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz SQL servers deploys a specific min TLS version requirement. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-mintls SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Owner 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz MySQL database servers enforce SSL connections. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-mysql-http SQL Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz PostgreSQL database servers enforce SSL connection. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-postgresql-http SQL Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Event Grid Topic to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-eventgridtopic Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Relay to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-relay Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for VPN Gateway to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-vnetgw Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Machine Learning workspace to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mlworkspace Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz RDP access from the Internet should be blocked /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-rdp-from-internet Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploys NSG flow logs and traffic analytics to Log Analytics /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-nsg-flowlogs-to-la Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Storage Account Contributor; Network Contributor; Storage Account Key Operator Service Role; Log Analytics Contributor; Contributor 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Database for PostgreSQL to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-postgresql Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Cosmos DB to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-cosmosdb Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Analysis Services to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-analysisservice Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Load Balancer to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-loadbalancer Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy SQL database auditing settings /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-auditingsettings SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled SQL Security Manager 0 1 (Deploy SQL Database built-in SQL security configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-sql-security)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Database for MySQL to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mysql Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny public access of Azure Machine Learning clusters via SSH /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-computecluster-remoteloginportpublicaccess Machine Learning Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Enforce scale settings for Azure Machine Learning compute clusters /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-computecluster-scale Budget Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Subnets should have a Network Security Group /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-subnet-without-nsg Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Container Instances to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-aci Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Data Lake Analytics to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-dlanalytics Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy SQL Database security Alert Policies configuration with email admin accounts /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-securityalertpolicies SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled SQL Security Manager 0 1 (Deploy SQL Database built-in SQL security configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-sql-security)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Container Registry to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-acr Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for SQL Managed Instances to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-sqlmi Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz KeyVault SoftDelete should be enabled /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-kv-softdelete Key Vault Fixed: append n/a 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Databricks to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-databricks Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Control private endpoint connections to Azure Machine Learning /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/audit-machinelearning-privateendpointid Machine Learning Default: Audit; Allowed: Audit,Deny,Disabled n/a 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny non-premium Databricks sku /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-databricks-sku Databricks Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Power BI Embedded to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-powerbiembedded Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny the creation of public IP /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-publicip Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Enforce subnet connectivity for Azure Machine Learning compute clusters and compute instances /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-compute-subnetid Machine Learning Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for MariaDB to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mariadb Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Subnets should have a User Defined Route /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-subnet-without-udr Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Windows Domain Join Extension with keyvault configuration /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-windows-domainjoin Guest Configuration Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Virtual Machine Contributor 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny vNet peering /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-vnet-peering Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy SQL Database vulnerability Assessments /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-vulnerabilityassessments SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled SQL Security Manager; Monitoring Contributor 0 1 (Deploy SQL Database built-in SQL security configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-sql-security)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz AppService append sites with minimum TLS version to enforce. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-appservice-latesttls App Service Default: Append; Allowed: Append,Disabled n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Azure Cache for Redis Append and the enforcement that enableNonSslPort is disabled. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-redis-disablenonsslport Cache Default: Append; Allowed: Append,Disabled,Modify n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Virtual Network with peering to the hub /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-vnet-hubspoke Network Fixed: deployIfNotExists Contributor 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for SQL Elastic Pools to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-sqlelasticpools Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for App Service Plan to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-webserverfarm Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for CDN Endpoint to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-cdnendpoints Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for App Service to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-website Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz No child resources in Automation Account /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-aa-child-resources Automation Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Automation to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-aa Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Time Series Insights to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-timeseriesinsights Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy SQL Database Transparent Data Encryption /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-tde SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled SQL Security Manager 0 1 (Deploy SQL Database built-in SQL security configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-sql-security)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Network Interfaces to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-nic Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Front Door to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-frontdoor Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny the creation of private DNS /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-private-dns-zones Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for WVD Workspace to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-wvdworkspace Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Azure API for FHIR to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-apiforfhir Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Azure Firewall Manager policy in the subscription /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-firewallpolicy Network Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Contributor 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Firewall to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-firewall Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Redis Cache to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-rediscache Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Virtual Machine Scale Sets to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-vmss Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz AppService append enable https only setting to enforce https setting. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-appservice-httpsonly App Service Default: Append; Allowed: Append,Disabled n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for HDInsight to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-hdinsight Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Azure Machine Learning should have disabled public network access /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-publicnetworkaccess Machine Learning Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:05 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Enforces high business impact Azure Machine Learning Workspaces /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-hbiworkspace Machine Learning Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0 Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for ExpressRoute to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-expressroute Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:57 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for WVD Host Pools to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-wvdhostpools Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Azure Function App to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-function Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Azure SQL Database should have the minimal TLS version set to the highest version /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-sql-mintls SQL Default: Audit; Allowed: Audit,Disabled,Deny n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) Created&Updated 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Azure Data Explorer Cluster to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-dataexplorercluster Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny public IPs for Databricks cluster /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-databricks-nopublicip Databricks Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0 Created&Updated 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz SQL managed instances deploy a specific min TLS version requirement. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sqlmi-mintls SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Owner 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) Created&Updated 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Azure Cache for Redis only secure connections should be enabled /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-redis-http Cache Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) Created&Updated 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Azure Storage deploy a specific min TLS version requirement and enforce SSL/HTTPS /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-storage-sslenforcement Storage Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Owner 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) Created&Updated 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Application Gateway should be deployed with WAF enabled /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-appgw-without-waf Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0 Created&Updated 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploys NSG flow logs and traffic analytics /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-nsg-flowlogs Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 0 Created&Updated 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Data Factory to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-datafactory Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Web Application should only be accessible over HTTPS /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-appservicewebapp-http App Service Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit)) Created&Updated 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny AKS cluster creation in Azure Machine Learning /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-aks Machine Learning Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0 Created&Updated 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Public network access should be disabled for MariaDB /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-publicendpoint-mariadb SQL Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0 Created&Updated 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Application Gateway to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-applicationgateway Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Logic Apps integration service environment to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-logicappsise Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings for Event Grid System Topic to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-eventgridsystemtopic Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics)) Created&Updated 03/10/2022 10:49:56 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:03 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Download CSV semicolon | comma
Scope ScopeId PolicySet DisplayName PolicySetId Category Unique assignments Policies used in PolicySet Created/Updated CreatedOn CreatedBy UpdatedOn UpdatedBy
Mg alz Deploy Microsoft Defender for Cloud configuration /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-mdfc-config Security Center 0 12 (Configure Azure Defender for Key Vaults to be enabled (/providers/microsoft.authorization/policydefinitions/1f725891-01c0-420a-9059-4fa46cb770b7); Configure Azure Defender for DNS to be enabled (/providers/microsoft.authorization/policydefinitions/2370a3c1-4a25-4283-a91a-c9c1a145fb2f); Configure Azure Defender for open-source relational databases to be enabled (/providers/microsoft.authorization/policydefinitions/44433aa3-7ec2-4002-93ea-65c65ff0310a); Configure Azure Defender for SQL servers on machines to be enabled (/providers/microsoft.authorization/policydefinitions/50ea7265-7d8c-429e-9a7d-ca1f410191c3); Configure Azure Defender for Storage to be enabled (/providers/microsoft.authorization/policydefinitions/74c30959-af11-47b3-9ed2-a26e03f427a3); Configure Azure Defender for servers to be enabled (/providers/microsoft.authorization/policydefinitions/8e86a5b6-b9bd-49d1-8e21-4bb8a0862222); Configure Azure Defender for App Service to be enabled (/providers/microsoft.authorization/policydefinitions/b40e7bcd-a1e5-47fe-b9cf-2f534d0bfb7d); Configure Azure Defender for Resource Manager to be enabled (/providers/microsoft.authorization/policydefinitions/b7021b2b-08fd-4dc0-9de7-3c6ece09faf9); Configure Azure Defender for Azure SQL database to be enabled (/providers/microsoft.authorization/policydefinitions/b99b73e7-074b-4089-9395-b7236f094491); Configure Microsoft Defender for Containers to be enabled (/providers/microsoft.authorization/policydefinitions/c9ddb292-b203-4738-aead-18e2716e858f); Deploy export to Log Analytics workspace for Azure Security Center data (/providers/microsoft.authorization/policydefinitions/ffb6f416-7bd2-4488-8828-56585fef2be9); Deploy Azure Security Center Security Contacts (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-asc-securitycontacts)) Created&Updated 2022-03-10 10:49:59 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 2022-03-10 12:43:06 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Public network access should be disabled for PaaS services /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deny-publicpaasendpoints 0 10 (Azure Kubernetes Service Private Clusters should be enabled (/providers/microsoft.authorization/policydefinitions/040732e8-d947-40b8-95d6-854c95024bf8); Public network access should be disabled for Container registries (/providers/microsoft.authorization/policydefinitions/0fdf0491-d080-4575-b627-ad0e843cba0f); Public network access on Azure SQL Database should be disabled (/providers/microsoft.authorization/policydefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780); Public network access should be disabled for Azure File Sync (/providers/microsoft.authorization/policydefinitions/21a8cd35-125e-4d13-b82d-2e19b7208bb7); Storage accounts should restrict network access (/providers/microsoft.authorization/policydefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c); [Preview]: Azure Key Vault should disable public network access (/providers/microsoft.authorization/policydefinitions/55615ac9-af46-4a59-874e-391cc3dfb490); Public network access should be disabled for PostgreSQL flexible servers (/providers/microsoft.authorization/policydefinitions/5e1de0e3-42cb-4ebc-a86d-61d0c619ca48); Public network access should be disabled for Batch accounts (/providers/microsoft.authorization/policydefinitions/74c5a0ae-5e48-4738-b093-65e23a060488); Azure Cosmos DB should disable public network access (/providers/microsoft.authorization/policydefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a); Public network access should be disabled for MySQL flexible servers (/providers/microsoft.authorization/policydefinitions/c9299215-ae47-4f50-9c54-8a392f68a052)) Created&Updated 2022-03-10 10:49:59 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 2022-03-10 12:43:06 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit Encryption 0 22 (Kubernetes clusters should be accessible only over HTTPS (/providers/microsoft.authorization/policydefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d); Latest TLS version should be used in your API App (/providers/microsoft.authorization/policydefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e); Latest TLS version should be used in your Web App (/providers/microsoft.authorization/policydefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b); Latest TLS version should be used in your Function App (/providers/microsoft.authorization/policydefinitions/f9d614c5-c173-4d56-95a7-b4437057d193); API App should only be accessible over HTTPS (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-appserviceapiapp-http); AppService append enable https only setting to enforce https setting. (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-appservice-httpsonly); AppService append sites with minimum TLS version to enforce. (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-appservice-latesttls); Azure Cache for Redis Append a specific min TLS version requirement and enforce TLS. (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-redis-sslenforcement); Azure Cache for Redis Append and the enforcement that enableNonSslPort is disabled. (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-redis-disablenonsslport); Azure Cache for Redis only secure connections should be enabled (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-redis-http); Azure Database for MySQL server deploy a specific min TLS version and enforce SSL. (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-mysql-sslenforcement); Azure Database for PostgreSQL server deploy a specific min TLS version requirement and enforce SSL (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-postgresql-sslenforcement); Azure SQL Database should have the minimal TLS version set to the highest version (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-sql-mintls); Azure Storage deploy a specific min TLS version requirement and enforce SSL/HTTPS (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-storage-sslenforcement); Function App should only be accessible over HTTPS (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-appservicefunctionapp-http); MySQL database servers enforce SSL connections. (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-mysql-http); PostgreSQL database servers enforce SSL connection. (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-postgresql-http); SQL Managed Instance should have the minimal TLS version set to the highest version (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-sqlmi-mintls); SQL managed instances deploy a specific min TLS version requirement. (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sqlmi-mintls); SQL servers deploys a specific min TLS version requirement. (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-mintls); Storage Account set to minumum TLS and Secure transfer should be enabled (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-storage-mintls); Web Application should only be accessible over HTTPS (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-appservicewebapp-http)) Created&Updated 2022-03-10 10:49:59 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 2022-03-10 12:43:06 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy Diagnostic Settings to Azure Services /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics Monitoring 0 62 (Deploy Diagnostic Settings for Service Bus to Log Analytics workspace (/providers/microsoft.authorization/policydefinitions/04d53d87-841c-4f23-8a5b-21564380b55e); Deploy Diagnostic Settings for Search Services to Log Analytics workspace (/providers/microsoft.authorization/policydefinitions/08ba64b8-738f-4918-9686-730d2ed79c7d); Deploy Diagnostic Settings for Event Hub to Log Analytics workspace (/providers/microsoft.authorization/policydefinitions/1f6e93e8-6b31-41b1-83f6-36e449a42579); Deploy Diagnostic Settings for Stream Analytics to Log Analytics workspace (/providers/microsoft.authorization/policydefinitions/237e0f7e-b0e8-4ec4-ad46-8c12cb66d673); Deploy - Configure diagnostic settings for Azure Kubernetes Service to Log Analytics workspace (/providers/microsoft.authorization/policydefinitions/6c66c325-74c8-42fd-a286-a74b0e2939d8); Configure diagnostic settings for storage accounts to Log Analytics workspace (/providers/microsoft.authorization/policydefinitions/6f8f98a4-f108-47cb-8e98-91a0d85cd474); Public IP addresses should have resource logs enabled for Azure DDoS Protection Standard (/providers/microsoft.authorization/policydefinitions/752154a7-1e0f-45c6-a880-ac75a7e4f648); Deploy - Configure diagnostic settings for SQL Databases to Log Analytics workspace (/providers/microsoft.authorization/policydefinitions/b79fa14e-238a-4c2d-b376-442ce508fc84); Deploy Diagnostic Settings for Logic Apps to Log Analytics workspace (/providers/microsoft.authorization/policydefinitions/b889a06c-ec72-4b03-910a-cb169ee18721); Deploy Diagnostic Settings for Key Vault to Log Analytics workspace (/providers/microsoft.authorization/policydefinitions/bef3f64c-5290-43b7-85b0-9b254eef4c47); Deploy Diagnostic Settings for Recovery Services Vault to Log Analytics workspace for resource specific categories. (/providers/microsoft.authorization/policydefinitions/c717fb0c-d118-4c43-ab3d-ece30ac81fb3); Deploy Diagnostic Settings for Batch Account to Log Analytics workspace (/providers/microsoft.authorization/policydefinitions/c84e5349-db6d-4769-805e-e14037dab9b5); Deploy Diagnostic Settings for Data Lake Analytics to Log Analytics workspace (/providers/microsoft.authorization/policydefinitions/d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03); Deploy Diagnostic Settings for Analysis Services to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-analysisservice); Deploy Diagnostic Settings for API Management to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-apimgmt); Deploy Diagnostic Settings for App Service Plan to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-webserverfarm); Deploy Diagnostic Settings for App Service to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-website); Deploy Diagnostic Settings for Application Gateway to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-applicationgateway); Deploy Diagnostic Settings for Automation to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-aa); Deploy Diagnostic Settings for Azure API for FHIR to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-apiforfhir); Deploy Diagnostic Settings for Azure Data Explorer Cluster to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-dataexplorercluster); Deploy Diagnostic Settings for Azure Function App to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-function); Deploy Diagnostic Settings for Azure Media Service to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mediaservice); Deploy Diagnostic Settings for CDN Endpoint to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-cdnendpoints); Deploy Diagnostic Settings for Cognitive Services to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-cognitiveservices); Deploy Diagnostic Settings for Container Instances to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-aci); Deploy Diagnostic Settings for Container Registry to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-acr); Deploy Diagnostic Settings for Cosmos DB to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-cosmosdb); Deploy Diagnostic Settings for Data Factory to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-datafactory); Deploy Diagnostic Settings for Data Lake Analytics to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-dlanalytics); Deploy Diagnostic Settings for Database for MySQL to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mysql); Deploy Diagnostic Settings for Database for PostgreSQL to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-postgresql); Deploy Diagnostic Settings for Databricks to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-databricks); Deploy Diagnostic Settings for Event Grid subscriptions to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-eventgridsub); Deploy Diagnostic Settings for Event Grid System Topic to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-eventgridsystemtopic); Deploy Diagnostic Settings for Event Grid Topic to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-eventgridtopic); Deploy Diagnostic Settings for ExpressRoute to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-expressroute); Deploy Diagnostic Settings for Firewall to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-firewall); Deploy Diagnostic Settings for Front Door to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-frontdoor); Deploy Diagnostic Settings for HDInsight to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-hdinsight); Deploy Diagnostic Settings for IoT Hub to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-iothub); Deploy Diagnostic Settings for Load Balancer to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-loadbalancer); Deploy Diagnostic Settings for Logic Apps integration service environment to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-logicappsise); Deploy Diagnostic Settings for Machine Learning workspace to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mlworkspace); Deploy Diagnostic Settings for MariaDB to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mariadb); Deploy Diagnostic Settings for Network Interfaces to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-nic); Deploy Diagnostic Settings for Network Security Groups to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-networksecuritygroups); Deploy Diagnostic Settings for Power BI Embedded to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-powerbiembedded); Deploy Diagnostic Settings for Redis Cache to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-rediscache); Deploy Diagnostic Settings for Relay to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-relay); Deploy Diagnostic Settings for SignalR to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-signalr); Deploy Diagnostic Settings for SQL Elastic Pools to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-sqlelasticpools); Deploy Diagnostic Settings for SQL Managed Instances to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-sqlmi); Deploy Diagnostic Settings for Time Series Insights to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-timeseriesinsights); Deploy Diagnostic Settings for Traffic Manager to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-trafficmanager); Deploy Diagnostic Settings for Virtual Machine Scale Sets to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-vmss); Deploy Diagnostic Settings for Virtual Machines to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-vm); Deploy Diagnostic Settings for Virtual Network to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-virtualnetwork); Deploy Diagnostic Settings for VPN Gateway to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-vnetgw); Deploy Diagnostic Settings for WVD Application group to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-wvdappgroup); Deploy Diagnostic Settings for WVD Host Pools to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-wvdhostpools); Deploy Diagnostic Settings for WVD Workspace to Log Analytics workspace (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-wvdworkspace)) Created&Updated 2022-03-10 10:49:59 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 2022-03-10 12:43:06 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deny or Audit resources without Encryption with a customer-managed key (CMK) /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encryption-cmk Encryption 0 15 (Azure API for FHIR should use a customer-managed key to encrypt data at rest (/providers/microsoft.authorization/policydefinitions/051cba44-2429-45b9-9649-46cec11c7119); Virtual machines should encrypt temp disks, caches, and data flows between Compute and Storage resources (/providers/microsoft.authorization/policydefinitions/0961003e-5a0a-4549-abde-af6a37f2724d); [Deprecated]: SQL servers should use customer-managed keys to encrypt data at rest (/providers/microsoft.authorization/policydefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd); PostgreSQL servers should use customer-managed keys to encrypt data at rest (/providers/microsoft.authorization/policydefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274); Azure Cosmos DB accounts should use customer-managed keys to encrypt data at rest (/providers/microsoft.authorization/policydefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f); Container registries should be encrypted with a customer-managed key (/providers/microsoft.authorization/policydefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580); Cognitive Services accounts should enable data encryption with a customer-managed key (/providers/microsoft.authorization/policydefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d); Storage accounts should use customer-managed key for encryption (/providers/microsoft.authorization/policydefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25); Both operating systems and data disks in Azure Kubernetes Service clusters should be encrypted by customer-managed keys (/providers/microsoft.authorization/policydefinitions/7d7be79c-23ba-4033-84dd-45e2a5ccdd67); MySQL servers should use customer-managed keys to encrypt data at rest (/providers/microsoft.authorization/policydefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833); Azure Data Box jobs should use a customer-managed key to encrypt the device unlock password (/providers/microsoft.authorization/policydefinitions/86efb160-8de7-451d-bc08-5d475b0aadae); Azure Stream Analytics jobs should use customer-managed keys to encrypt data (/providers/microsoft.authorization/policydefinitions/87ba29ef-1ab3-4d82-b763-87fcd4f531f7); Azure Batch account should use customer-managed keys to encrypt data (/providers/microsoft.authorization/policydefinitions/99e9ccd8-3db9-4592-b0d1-14b1715a4d8a); Azure Machine Learning workspaces should be encrypted with a customer-managed key (/providers/microsoft.authorization/policydefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8); Azure Synapse workspaces should use customer-managed keys to encrypt data at rest (/providers/microsoft.authorization/policydefinitions/f7d52b2d-e161-4dfa-a82b-55e564167385)) Created&Updated 2022-03-10 10:49:59 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 2022-03-10 12:43:06 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Configure Azure PaaS services to use private DNS zones /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones Network 0 20 (Configure Azure File Sync to use private DNS zones (/providers/microsoft.authorization/policydefinitions/06695360-db88-47f6-b976-7500d4297475); Configure Azure Web PubSub Service to use private DNS zones (/providers/microsoft.authorization/policydefinitions/0b026355-49cb-467b-8ac4-f777874e175a); Deploy - Configure private DNS zones for private endpoints that connect to Batch accounts (/providers/microsoft.authorization/policydefinitions/4ec38ebc-381f-45ee-81a4-acbc4be878f8); Configure private DNS zones for private endpoints connected to App Configuration (/providers/microsoft.authorization/policydefinitions/7a860e27-9ca2-4fc6-822d-c2d248c300df); [Preview]: Configure Azure Recovery Services vaults to use private DNS zones (/providers/microsoft.authorization/policydefinitions/942bd215-1a66-44be-af65-6a1c0318dbe2); Configure IoT Hub device provisioning instances to use private DNS zones (/providers/microsoft.authorization/policydefinitions/aaa64d2d-2fa3-45e5-b332-0b031b9b30e8); [Preview]: Configure Azure Key Vaults to use private DNS zones (/providers/microsoft.authorization/policydefinitions/ac673a9a-f77d-4846-b2d8-a57f8e1c01d4); Deploy - Configure private DNS zones for private endpoints connect to Azure SignalR Service (/providers/microsoft.authorization/policydefinitions/b0e86710-7fb7-4a6c-a064-32e9b829509e); Configure App Services to use private DNS zones (/providers/microsoft.authorization/policydefinitions/b318f84a-b872-429b-ac6d-a01b96814452); Deploy - Configure Azure Event Grid topics to use private DNS zones (/providers/microsoft.authorization/policydefinitions/baf19753-7502-405f-8745-370519b20483); Configure disk access resources to use private DNS zones (/providers/microsoft.authorization/policydefinitions/bc05b96c-0b36-4ca9-82f0-5c53f96ce05a); Configure Cognitive Services accounts to use private DNS zones (/providers/microsoft.authorization/policydefinitions/c4bc6f10-cb41-49eb-b000-d5ab82e2a091); Deploy - Configure Azure IoT Hubs to use private DNS zones (/providers/microsoft.authorization/policydefinitions/c99ce9c1-ced7-4c3e-aca0-10e69ce0cb02); Deploy - Configure Azure Event Grid domains to use private DNS zones (/providers/microsoft.authorization/policydefinitions/d389df0a-e0d7-4607-833c-75a6fdac2c2d); Configure Azure Cache for Redis to use private DNS zones (/providers/microsoft.authorization/policydefinitions/e016b22b-e0eb-436d-8fd7-160c4eaed6e2); Configure Container registries to use private DNS zones (/providers/microsoft.authorization/policydefinitions/e9585a95-5b8c-4d03-b193-dc7eb5ac4c32); Configure Event Hub namespaces to use private DNS zones (/providers/microsoft.authorization/policydefinitions/ed66d4f5-8220-45dc-ab4a-20d1749c74e6); Configure Azure Machine Learning workspace to use private DNS zones (/providers/microsoft.authorization/policydefinitions/ee40564d-486e-4f68-a5ca-7a621edae0fb); Configure Service Bus namespaces to use private DNS zones (/providers/microsoft.authorization/policydefinitions/f0fcf93c-c063-4071-9668-c47474bd3564); Configure Azure Cognitive Search services to use private DNS zones (/providers/microsoft.authorization/policydefinitions/fbc14a67-53e4-4932-abcc-2049c6706009)) Created&Updated 2022-03-10 10:49:59 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 2022-03-10 12:43:06 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Mg alz Deploy SQL Database built-in SQL security configuration /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-sql-security SQL 0 4 (Deploy SQL database auditing settings (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-auditingsettings); Deploy SQL Database security Alert Policies configuration with email admin accounts (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-securityalertpolicies); Deploy SQL Database Transparent Data Encryption (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-tde); Deploy SQL Database vulnerability Assessments (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-vulnerabilityassessments)) Created&Updated 2022-03-10 10:49:59 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 2022-03-10 12:43:05 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574

0 Created/Updated Policy assignments

Download CSV semicolon | comma
Role Name RoleId Assignable Scopes Data Created/Updated CreatedOn CreatedBy UpdatedOn UpdatedBy
Network management (NetOps) 4a200286-e2a0-5239-aa8f-fe0a90dd2eb5 1 (/providers/Microsoft.Management/managementGroups/alz) false Created&Updated 03/10/2022 10:50:43 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:46 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Security operations (SecOps) b2960c40-d3db-5190-94c1-5b07c9547956 1 (/providers/Microsoft.Management/managementGroups/alz) false Created&Updated 03/10/2022 10:50:42 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:46 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Application owners (DevOps/AppOps) 4308c4e6-07d5-534f-9e18-32769872a3f4 1 (/providers/Microsoft.Management/managementGroups/alz) false Created&Updated 03/10/2022 10:50:42 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:46 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Subscription owner 8736d87d-8d31-53be-b952-a04c8d470f69 1 (/providers/Microsoft.Management/managementGroups/alz) false Created&Updated 03/10/2022 10:50:42 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574 03/10/2022 12:43:46 ObjectType: SP APP INT; ObjectDisplayName: spn-alz-accelerator-11; ObjectSignInName: n/a; ObjectId: 07390265-aba8-4f54-8a36-db57e2c11574
Download CSV semicolon | comma
Scope Role Role Id Role Type Data Identity Displayname Identity SignInName Identity ObjectId Identity Type Applicability Applies through membership Group Details Role AssignmentId Related Policy Assignment CreatedOn CreatedBy
Mg Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-platform-identity/providers/microsoft.authorization/roleassignments/72412164-1650-4110-aaf1-708631c37efb none 03/10/2022 10:48:26 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-platform-management/providers/microsoft.authorization/roleassignments/cfa9db8a-5ab9-474d-8daf-6a484895b1b3 none 03/10/2022 10:48:26 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-landingzones-corp/providers/microsoft.authorization/roleassignments/b706c72d-88d9-449b-9814-bb832b53e7f0 none 03/10/2022 10:48:25 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-landingzones-online/providers/microsoft.authorization/roleassignments/dd120953-11ae-4f10-8856-49e430d1111d none 03/10/2022 10:48:25 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-platform-connectivity/providers/microsoft.authorization/roleassignments/80962acc-cc5c-4eaa-b2bd-f5c567c22766 none 03/10/2022 10:48:25 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-landingzones/providers/microsoft.authorization/roleassignments/c7c07346-d6d5-41a0-b253-dfcc55072f48 none 03/10/2022 10:48:03 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-decommissioned/providers/microsoft.authorization/roleassignments/a2474fb8-5d7f-4d9a-9646-363d798b25f7 none 03/10/2022 10:48:02 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-platform/providers/microsoft.authorization/roleassignments/64677d6a-3574-4abd-a351-5ad5dc1da7c7 none 03/10/2022 10:48:02 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-sandbox/providers/microsoft.authorization/roleassignments/08749dc1-4bc8-4d50-aa00-0aa45e8bd443 none 03/10/2022 10:48:02 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Mg Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 none 03/10/2022 10:47:40 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
Ten Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e none 03/09/2022 00:40:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2

0 Created/Changed Resources

Download CSV semicolon | comma
Id Name Name Invalid chars DisplayName DisplayName Invalid chars
/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-storage-sslenforcement Azure Storage deploy a specific min TLS version requirement and enforce SSL/HTTPS /

PolicySet 0 Naming findings

Policy assignment 0 Naming findings

Management Group 0 Naming findings

Subscription 0 Naming findings

Download CSV semicolon | comma
Id Name Name Invalid chars
4308c4e6-07d5-534f-9e18-32769872a3f4 Application owners (DevOps/AppOps) /

DefinitionInsights

JSON PolicyType Category Deprecated Preview Scope Mg/Sub Scope Name/Id effectDefaultValue hasAssignments Assignments Count Assignments UsedInPolicySet PolicySetsCount PolicySets Roles
BuiltIn Security Center True False n/a n/a Disabled false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a Disabled false 0 n/a false 0 n/a n/a
BuiltIn SQL True False n/a n/a Disabled false 0 n/a false 0 n/a n/a
BuiltIn SQL True False n/a n/a Disabled false 0 n/a false 0 n/a n/a
BuiltIn SQL True False n/a n/a Disabled false 0 n/a false 0 n/a n/a
BuiltIn SQL True False n/a n/a Disabled false 0 n/a false 0 n/a n/a
BuiltIn Tags True False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Tags True False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn General True False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn General True False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn General True False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn General True False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn App Service True False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn App Service True False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Guest Configuration True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn SQL True False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Guest Configuration True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a true 1 [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b) n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a true 1 [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b) n/a
BuiltIn Cognitive Services True False n/a n/a Disabled false 0 n/a false 0 n/a n/a
BuiltIn Cognitive Services True False n/a n/a Disabled false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Security Admin' (fb1c8493-542b-48eb-b624-b4c8fea62acd)
BuiltIn Security Center True False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Security Admin' (fb1c8493-542b-48eb-b624-b4c8fea62acd)
BuiltIn Automanage True False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn General True False n/a n/a Audit false 0 n/a true 1 [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b) n/a
BuiltIn Compute True False n/a n/a n/a false 0 n/a false 0 n/a 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit VMs with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/3fa7cbf5-c0a4-4a59-85a5-cca4d996d5a6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit VMs with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/3fa7cbf5-c0a4-4a59-85a5-cca4d996d5a6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Linux VMs that do not have the specified applications installed (/providers/microsoft.authorization/policysetdefinitions/c937dcb4-4398-4b39-8d63-4a6be432252e) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit VMs with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/3fa7cbf5-c0a4-4a59-85a5-cca4d996d5a6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Linux VMs that have the specified applications installed (/providers/microsoft.authorization/policysetdefinitions/f48bcc78-5400-4fb0-b913-5140a2e5fa20) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows Server VMs on which Windows Serial Console is not enabled (/providers/microsoft.authorization/policysetdefinitions/acb6cd8e-45f5-466f-b3cb-ff6fce525f71) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs in which the Administrators group contains any of the specified members (/providers/microsoft.authorization/policysetdefinitions/add1999e-a61c-46d3-b8c3-f35fb8398175) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs in which the Administrators group does not contain all of the specified members (/providers/microsoft.authorization/policysetdefinitions/133046de-0bd7-4546-93f4-f452e9e258b7) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs in which the Administrators group does not contain only the specified members (/providers/microsoft.authorization/policysetdefinitions/06122b01-688c-42a8-af2e-fa97dd39aa3b) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs on which the DSC configuration is not compliant (/providers/microsoft.authorization/policysetdefinitions/c58599d5-0d51-454f-aaf1-da18a5e76edd) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs on which the Log Analytics agent is not connected as expected (/providers/microsoft.authorization/policysetdefinitions/06c5e415-a662-463a-bb85-ede14286b979) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs on which the remote host connection status does not match the specified one (/providers/microsoft.authorization/policysetdefinitions/4ddaefff-7c78-4824-9b27-5c344f3cdf90) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs on which the specified services are not installed and 'Running' (/providers/microsoft.authorization/policysetdefinitions/8eeec860-e2fa-4f89-a669-84942c57225f) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs on which Windows Defender Exploit Guard is not enabled (/providers/microsoft.authorization/policysetdefinitions/9d2fd8e6-95c8-410d-add0-43ada4241574) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit VMs with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/3fa7cbf5-c0a4-4a59-85a5-cca4d996d5a6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that are not joined to the specified domain (/providers/microsoft.authorization/policysetdefinitions/6b3c1e80-8ae5-405b-b021-c23d13b3959f) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that are not set to the specified time zone (/providers/microsoft.authorization/policysetdefinitions/538942d3-3fae-4fb6-9d94-744f9a51e7da) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that contain certificates expiring within the specified number of days (/providers/microsoft.authorization/policysetdefinitions/b6f5e05c-0aaa-4337-8dd4-357c399d12ae) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not contain the specified certificates in Trusted Root (/providers/microsoft.authorization/policysetdefinitions/cdfcc6ff-945e-4bc6-857e-056cbc511e0c) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit VMs with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/3fa7cbf5-c0a4-4a59-85a5-cca4d996d5a6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit VMs with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/3fa7cbf5-c0a4-4a59-85a5-cca4d996d5a6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit VMs with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/3fa7cbf5-c0a4-4a59-85a5-cca4d996d5a6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not have the specified applications installed (/providers/microsoft.authorization/policysetdefinitions/25ef9b72-4af2-4501-acd1-fc814e73dde1) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not have the specified Windows PowerShell execution policy (/providers/microsoft.authorization/policysetdefinitions/f000289c-47af-4043-87da-91ba9e1a2720) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not have the specified Windows PowerShell modules installed (/providers/microsoft.authorization/policysetdefinitions/c980fd64-c67f-49a6-a8a8-e57661150802) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit VMs with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/3fa7cbf5-c0a4-4a59-85a5-cca4d996d5a6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit VMs with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/3fa7cbf5-c0a4-4a59-85a5-cca4d996d5a6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that have not restarted within the specified number of days (/providers/microsoft.authorization/policysetdefinitions/b8b5b0a8-b809-4e5d-8082-382c686e35b7) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that have the specified applications installed (/providers/microsoft.authorization/policysetdefinitions/d7fff7ea-9d47-4952-b854-b7da261e48f2) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs with a pending reboot (/providers/microsoft.authorization/policysetdefinitions/c96b2a9c-6fab-4ac2-ae21-502143491cd4) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows web servers that are not using secure communication protocols (/providers/microsoft.authorization/policysetdefinitions/8bc55e6b-e9d5-4266-8dac-f688d151ec9c) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn App Service True False n/a n/a AuditIfNotExists false 0 n/a true 7 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Kubernetes service True False n/a n/a EnforceRegoPolicy false 0 n/a false 0 n/a n/a
BuiltIn SQL True False n/a n/a Disabled false 0 n/a false 0 n/a n/a
BuiltIn SQL True False n/a n/a Disabled false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes service True False n/a n/a EnforceRegoPolicy false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes service True False n/a n/a EnforceRegoPolicy false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes service True False n/a n/a EnforceRegoPolicy false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes service True False n/a n/a EnforceRegoPolicy false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes True False n/a n/a deny false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes service True False n/a n/a EnforceRegoPolicy false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes service True False n/a n/a EnforceRegoPolicy false 0 n/a false 0 n/a n/a
BuiltIn App Service True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes service True False n/a n/a EnforceRegoPolicy false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes service True False n/a n/a EnforceRegoPolicy false 0 n/a false 0 n/a n/a
BuiltIn App Service True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn App Service True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn App Service True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn App Service True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn App Service True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn App Service True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn App Service True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn App Service True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes True False n/a n/a deny false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a Disabled false 0 n/a false 0 n/a n/a
BuiltIn Network True False n/a n/a Audit false 0 n/a true 1 [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b) n/a
BuiltIn Storage True False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn SQL True False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Network True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit VMs with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/3fa7cbf5-c0a4-4a59-85a5-cca4d996d5a6) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit VMs with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/3fa7cbf5-c0a4-4a59-85a5-cca4d996d5a6) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Linux VMs that do not have the specified applications installed (/providers/microsoft.authorization/policysetdefinitions/c937dcb4-4398-4b39-8d63-4a6be432252e) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit VMs with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/3fa7cbf5-c0a4-4a59-85a5-cca4d996d5a6) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Linux VMs that have the specified applications installed (/providers/microsoft.authorization/policysetdefinitions/f48bcc78-5400-4fb0-b913-5140a2e5fa20) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows Server VMs on which Windows Serial Console is not enabled (/providers/microsoft.authorization/policysetdefinitions/acb6cd8e-45f5-466f-b3cb-ff6fce525f71) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings (/providers/microsoft.authorization/policysetdefinitions/d618d658-b2d0-410e-9e2e-bfbfd04d09fa) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs in which the Administrators group contains any of the specified members (/providers/microsoft.authorization/policysetdefinitions/add1999e-a61c-46d3-b8c3-f35fb8398175) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs in which the Administrators group does not contain all of the specified members (/providers/microsoft.authorization/policysetdefinitions/133046de-0bd7-4546-93f4-f452e9e258b7) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs in which the Administrators group does not contain only the specified members (/providers/microsoft.authorization/policysetdefinitions/06122b01-688c-42a8-af2e-fa97dd39aa3b) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs on which the DSC configuration is not compliant (/providers/microsoft.authorization/policysetdefinitions/c58599d5-0d51-454f-aaf1-da18a5e76edd) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs on which the Log Analytics agent is not connected as expected (/providers/microsoft.authorization/policysetdefinitions/06c5e415-a662-463a-bb85-ede14286b979) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs on which the remote host connection status does not match the specified one (/providers/microsoft.authorization/policysetdefinitions/4ddaefff-7c78-4824-9b27-5c344f3cdf90) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs on which the specified services are not installed and 'Running' (/providers/microsoft.authorization/policysetdefinitions/8eeec860-e2fa-4f89-a669-84942c57225f) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs on which Windows Defender Exploit Guard is not enabled (/providers/microsoft.authorization/policysetdefinitions/9d2fd8e6-95c8-410d-add0-43ada4241574) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit VMs with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/3fa7cbf5-c0a4-4a59-85a5-cca4d996d5a6) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that are not joined to the specified domain (/providers/microsoft.authorization/policysetdefinitions/6b3c1e80-8ae5-405b-b021-c23d13b3959f) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that are not set to the specified time zone (/providers/microsoft.authorization/policysetdefinitions/538942d3-3fae-4fb6-9d94-744f9a51e7da) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that contain certificates expiring within the specified number of days (/providers/microsoft.authorization/policysetdefinitions/b6f5e05c-0aaa-4337-8dd4-357c399d12ae) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not contain the specified certificates in Trusted Root (/providers/microsoft.authorization/policysetdefinitions/cdfcc6ff-945e-4bc6-857e-056cbc511e0c) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit VMs with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/3fa7cbf5-c0a4-4a59-85a5-cca4d996d5a6) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit VMs with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/3fa7cbf5-c0a4-4a59-85a5-cca4d996d5a6) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit VMs with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/3fa7cbf5-c0a4-4a59-85a5-cca4d996d5a6) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not have the specified applications installed (/providers/microsoft.authorization/policysetdefinitions/25ef9b72-4af2-4501-acd1-fc814e73dde1) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not have the specified Windows PowerShell execution policy (/providers/microsoft.authorization/policysetdefinitions/f000289c-47af-4043-87da-91ba9e1a2720) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that do not have the specified Windows PowerShell modules installed (/providers/microsoft.authorization/policysetdefinitions/c980fd64-c67f-49a6-a8a8-e57661150802) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit VMs with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/3fa7cbf5-c0a4-4a59-85a5-cca4d996d5a6) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit VMs with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/3fa7cbf5-c0a4-4a59-85a5-cca4d996d5a6) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that have not restarted within the specified number of days (/providers/microsoft.authorization/policysetdefinitions/b8b5b0a8-b809-4e5d-8082-382c686e35b7) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs that have the specified applications installed (/providers/microsoft.authorization/policysetdefinitions/d7fff7ea-9d47-4952-b854-b7da261e48f2) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows VMs with a pending reboot (/providers/microsoft.authorization/policysetdefinitions/c96b2a9c-6fab-4ac2-ae21-502143491cd4) n/a
BuiltIn Guest Configuration True False n/a n/a n/a false 0 n/a true 1 [Deprecated]: Audit Windows web servers that are not using secure communication protocols (/providers/microsoft.authorization/policysetdefinitions/8bc55e6b-e9d5-4266-8dac-f688d151ec9c) n/a
BuiltIn SQL True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn SQL True False n/a n/a AuditIfNotExists false 0 n/a true 1 Deny or Audit resources without Encryption with a customer-managed key (CMK) (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encryption-cmk) n/a
BuiltIn Network True False n/a n/a Audit false 0 n/a true 1 [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b) n/a
BuiltIn Compute True False n/a n/a Audit false 0 n/a true 1 [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92) n/a
BuiltIn Security Center True False n/a n/a Disabled false 0 n/a false 0 n/a n/a
BuiltIn Network True False n/a n/a Deny false 0 n/a false 0 n/a n/a
BuiltIn Network True False n/a n/a Deny false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center True False n/a n/a Disabled false 0 n/a false 0 n/a n/a
BuiltIn Network False True n/a n/a AuditIfNotExists false 0 n/a true 9 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Platform False True n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes False True n/a n/a AuditIfNotExists false 0 n/a true 6 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Kubernetes False True n/a n/a AuditIfNotExists false 0 n/a true 1 Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8) n/a
BuiltIn Data Factory False True n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Data Factory False True n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Data Factory False True n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Data Factory False True n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Data Factory False True n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Internet of Things False True n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Key Vault False True n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Key Vault False True n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Key Vault False True n/a n/a Audit false 0 n/a true 9 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693); Public network access should be disabled for PaaS services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deny-publicpaasendpoints) n/a
BuiltIn Key Vault False True n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes False True n/a n/a Audit false 0 n/a true 1 Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8) n/a
BuiltIn Backup False True n/a n/a Audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Backup False True n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Security Center False True n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center False True n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center False True n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center False True n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center False True n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center False True n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Key Vault False True n/a n/a audit false 0 n/a true 6 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Key Vault False True n/a n/a audit false 0 n/a false 0 n/a n/a
BuiltIn Security Center False True n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center False True n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center False True n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center False True n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center False True n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center False True n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Machine Learning False True n/a n/a enforceSetting false 0 n/a false 0 n/a n/a
BuiltIn Machine Learning False True n/a n/a enforceSetting false 0 n/a false 0 n/a n/a
BuiltIn Machine Learning False True n/a n/a enforceSetting false 0 n/a false 0 n/a n/a
BuiltIn Machine Learning False True n/a n/a enforceSetting false 0 n/a false 0 n/a n/a
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: Configure machines to automatically install the Azure Monitor and Azure Security agents on virtual machines (/providers/microsoft.authorization/policysetdefinitions/a15f3269-2e10-458c-87a4-d5989e678a73) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa)
BuiltIn Kubernetes False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Kubernetes False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Kubernetes Extension Contributor' (85cb6faf-e071-4c9b-8136-154b5a04f717)
BuiltIn Monitoring False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Monitoring False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a true 2 [Preview]: Configure Azure Defender for SQL agents on virtual machines (/providers/microsoft.authorization/policysetdefinitions/39a366e6-fdde-4f41-bbf8-3757f46d1611); [Preview]: Configure Azure Defender for SQL agents on virtual machines (/providers/microsoft.authorization/policysetdefinitions/39a366e6-fdde-4f41-bbf8-3757f46d1611) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Key Vault False True n/a n/a Modify false 0 n/a false 0 n/a 'Managed HSM contributor' (18500a29-7fe2-46b2-a342-b16a415e101d)
BuiltIn Key Vault False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7); 'Managed HSM contributor' (18500a29-7fe2-46b2-a342-b16a415e101d)
BuiltIn Key Vault False True n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Azure PaaS services to use private DNS zones (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones) 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Key Vault False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7); 'Key Vault Contributor' (f25e0fa2-a7c8-4377-a976-54943a77a395)
BuiltIn Kubernetes False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Site Recovery False True n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Azure PaaS services to use private DNS zones (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones) 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Backup False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Backup Contributor' (5e467623-bb1f-42f4-a55d-6e525e11384b)
BuiltIn Backup False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Backup Contributor' (5e467623-bb1f-42f4-a55d-6e525e11384b)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Machine Learning False True n/a n/a enforceSetting false 0 n/a false 0 n/a n/a
BuiltIn Key Vault False True n/a n/a Modify false 0 n/a false 0 n/a 'Key Vault Contributor' (f25e0fa2-a7c8-4377-a976-54943a77a395)
BuiltIn Machine Learning False True n/a n/a enforceSetting false 0 n/a false 0 n/a n/a
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: Configure machines to automatically install the Azure Monitor and Azure Security agents on virtual machines (/providers/microsoft.authorization/policysetdefinitions/a15f3269-2e10-458c-87a4-d5989e678a73) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Security Admin' (fb1c8493-542b-48eb-b624-b4c8fea62acd)
BuiltIn Update Management Center False True n/a n/a n/a false 0 n/a false 0 n/a 'Azure Connected Machine Resource Administrator' (cd570a14-e51a-42ad-bac8-bafd67325302)
BuiltIn Update Management Center False True n/a n/a n/a false 0 n/a false 0 n/a 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Site Recovery False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7); 'Site Recovery Contributor' (6670b86e-a3f7-4917-ac9b-5d6ab1be4567)
BuiltIn Backup False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: Configure prerequisites to enable Guest Attestation on Trusted Launch enabled VMs (/providers/microsoft.authorization/policysetdefinitions/281d9e47-d14d-4f05-b8eb-18f2c4a034ff) 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: Configure machines to automatically install the Azure Monitor and Azure Security agents on virtual machines (/providers/microsoft.authorization/policysetdefinitions/a15f3269-2e10-458c-87a4-d5989e678a73) 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: Configure prerequisites to enable Guest Attestation on Trusted Launch enabled VMs (/providers/microsoft.authorization/policysetdefinitions/281d9e47-d14d-4f05-b8eb-18f2c4a034ff) 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: Configure machines to automatically install the Azure Monitor and Azure Security agents on virtual machines (/providers/microsoft.authorization/policysetdefinitions/a15f3269-2e10-458c-87a4-d5989e678a73) 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: Configure prerequisites to enable Guest Attestation on Trusted Launch enabled VMs (/providers/microsoft.authorization/policysetdefinitions/281d9e47-d14d-4f05-b8eb-18f2c4a034ff) 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: Configure prerequisites to enable Guest Attestation on Trusted Launch enabled VMs (/providers/microsoft.authorization/policysetdefinitions/281d9e47-d14d-4f05-b8eb-18f2c4a034ff) 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Monitoring False True n/a n/a Modify false 0 n/a true 2 [Preview]: Configure prerequisites to enable Guest Attestation on Trusted Launch enabled VMs (/providers/microsoft.authorization/policysetdefinitions/281d9e47-d14d-4f05-b8eb-18f2c4a034ff); [Preview]: Configure machines to automatically install the Azure Monitor and Azure Security agents on virtual machines (/providers/microsoft.authorization/policysetdefinitions/a15f3269-2e10-458c-87a4-d5989e678a73) 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c); 'Managed Identity Contributor' (e40ec5ca-96e0-45a2-b4ff-59039f2c2b59); 'Managed Identity Operator' (f1a07417-d97a-45cb-824c-7a7467783830)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: Configure prerequisites to enable Guest Attestation on Trusted Launch enabled VMs (/providers/microsoft.authorization/policysetdefinitions/281d9e47-d14d-4f05-b8eb-18f2c4a034ff) 'Reader' (acdd72a7-3385-48ef-bd42-f606fba81ae7); 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: Configure prerequisites to enable Guest Attestation on Trusted Launch enabled VMs (/providers/microsoft.authorization/policysetdefinitions/281d9e47-d14d-4f05-b8eb-18f2c4a034ff) 'Reader' (acdd72a7-3385-48ef-bd42-f606fba81ae7); 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Network False True n/a n/a Audit false 0 n/a true 2 [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab) n/a
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: Deploy Microsoft Defender for Endpoint agent (/providers/microsoft.authorization/policysetdefinitions/e20d08c5-6d64-656d-6465-ce9e37fd0ebc) 'Security Admin' (fb1c8493-542b-48eb-b624-b4c8fea62acd)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: Deploy Microsoft Defender for Endpoint agent (/providers/microsoft.authorization/policysetdefinitions/e20d08c5-6d64-656d-6465-ce9e37fd0ebc) 'Security Admin' (fb1c8493-542b-48eb-b624-b4c8fea62acd)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: Deploy Microsoft Defender for Endpoint agent (/providers/microsoft.authorization/policysetdefinitions/e20d08c5-6d64-656d-6465-ce9e37fd0ebc) 'Security Admin' (fb1c8493-542b-48eb-b624-b4c8fea62acd)
BuiltIn Security Center False True n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: Deploy Microsoft Defender for Endpoint agent (/providers/microsoft.authorization/policysetdefinitions/e20d08c5-6d64-656d-6465-ce9e37fd0ebc) 'Security Admin' (fb1c8493-542b-48eb-b624-b4c8fea62acd)
BuiltIn Security Center False True n/a n/a AuditIfNotExists false 0 n/a true 1 Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8) n/a
BuiltIn Security Center False True n/a n/a AuditIfNotExists false 0 n/a true 1 Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8) n/a
BuiltIn Security Center False True n/a n/a AuditIfNotExists false 0 n/a true 1 Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8) n/a
BuiltIn Security Center False True n/a n/a AuditIfNotExists false 0 n/a true 1 Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8) n/a
BuiltIn Internet of Things False True n/a n/a Audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Kubernetes False True n/a n/a Audit false 0 n/a true 1 Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8) n/a
BuiltIn Security Center False True n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Monitoring False True n/a n/a AuditIfNotExists false 0 n/a true 6 IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); Enable Azure Monitor for VMs (/providers/microsoft.authorization/policysetdefinitions/55f3eceb-5573-4f18-9695-226972c6d74a); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
BuiltIn Monitoring False True n/a n/a AuditIfNotExists false 0 n/a true 7 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Monitoring False True n/a n/a AuditIfNotExists false 0 n/a true 7 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Update Management Center False True n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Security Center False True n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Monitoring False True n/a n/a AuditIfNotExists false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Monitoring False True n/a n/a AuditIfNotExists false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Key Vault False True n/a n/a Audit false 0 n/a true 7 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Site Recovery False True n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Security Center False True n/a n/a Audit false 0 n/a true 1 Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8) n/a
BuiltIn Storage False True n/a n/a audit false 0 n/a true 10 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False True n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center False True n/a n/a Audit false 0 n/a true 1 Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8) n/a
BuiltIn Network False False n/a n/a Audit false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 18 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 21 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a true 3 CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 20 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 19 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Tags False False n/a n/a n/a false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Tags False False n/a n/a n/a false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Tags False False n/a n/a n/a false 0 n/a false 0 n/a 'Tag Contributor' (4a9ae827-6dc8-4573-8ac7-8239d42aa03f)
BuiltIn Tags False False n/a n/a n/a false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Tags False False n/a n/a n/a false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Tags False False n/a n/a n/a false 0 n/a false 0 n/a 'Tag Contributor' (4a9ae827-6dc8-4573-8ac7-8239d42aa03f)
BuiltIn Guest Configuration False False n/a n/a n/a false 0 n/a true 18 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); Deploy prerequisites to enable Guest Configuration policies on virtual machines (/providers/microsoft.authorization/policysetdefinitions/12794019-7a00-42cf-95c2-882eed337cc8); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration False False n/a n/a n/a false 0 n/a true 18 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); Deploy prerequisites to enable Guest Configuration policies on virtual machines (/providers/microsoft.authorization/policysetdefinitions/12794019-7a00-42cf-95c2-882eed337cc8); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Event Hub False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Service Bus False False n/a n/a Audit false 0 n/a true 2 [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 17 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Lighthouse False False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn General False False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn General False False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn General False False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Compute False False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 9 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a true 18 CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a true 4 CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a true 6 CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 21 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a Audit false 0 n/a true 20 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
Custom App Service False False Mg alz (Azure Landing Zones) Deny false 0 n/a true 1 Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit) n/a
BuiltIn App Service False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn API Management False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn API Management False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn API Management False False n/a n/a Audit false 0 n/a true 9 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Configuration False False n/a n/a Audit false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn App Configuration False False n/a n/a Audit false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn App Configuration False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn App Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Configuration False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn App Service False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn App Service False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn App Service False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn App Service False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn App Service False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn App Service False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn App Service False False n/a n/a Audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Network False False n/a n/a AuditIfNotExists false 0 n/a true 2 [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Tags False False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Tags False False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Tags False False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Managed Application False False n/a n/a audit false 0 n/a false 0 n/a n/a
Custom Network False False Mg alz (Azure Landing Zones) Deny false 0 n/a false 0 n/a n/a
BuiltIn Monitoring False False n/a n/a audit false 0 n/a false 0 n/a n/a
BuiltIn Monitoring False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Monitoring False False n/a n/a Audit false 0 n/a false 0 n/a n/a
Custom App Service False False Mg alz (Azure Landing Zones) Append false 0 n/a true 1 Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit) n/a
Custom App Service False False Mg alz (Azure Landing Zones) Append false 0 n/a true 1 Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit) n/a
BuiltIn Machine Learning False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Lighthouse False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Monitoring False False n/a n/a n/a false 0 n/a true 12 IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 16 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); Audit machines with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/095e4ed9-c835-4ab6-9439-b5644362a06c); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 14 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); Audit machines with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/095e4ed9-c835-4ab6-9439-b5644362a06c); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 1 [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 15 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); Audit machines with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/095e4ed9-c835-4ab6-9439-b5644362a06c); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn General False False n/a n/a n/a false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn General False False n/a n/a Audit false 0 n/a true 17 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Compute False False n/a n/a n/a false 0 n/a true 13 IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Compute False False n/a n/a n/a false 0 n/a true 4 UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2) n/a
BuiltIn Guest Configuration False False n/a n/a n/a false 0 n/a true 9 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a) n/a
BuiltIn Guest Configuration False False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Guest Configuration False False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Guest Configuration False False n/a n/a n/a false 0 n/a true 3 [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab) n/a
BuiltIn Guest Configuration False False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Guest Configuration False False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 14 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); Audit machines with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/095e4ed9-c835-4ab6-9439-b5644362a06c); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Guest Configuration False False n/a n/a n/a false 0 n/a true 1 [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22) n/a
BuiltIn Guest Configuration False False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Guest Configuration False False n/a n/a n/a false 0 n/a true 1 [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8) n/a
BuiltIn Guest Configuration False False n/a n/a n/a false 0 n/a true 2 [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 12 Audit machines with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/095e4ed9-c835-4ab6-9439-b5644362a06c); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 11 Audit machines with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/095e4ed9-c835-4ab6-9439-b5644362a06c); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 14 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); Audit machines with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/095e4ed9-c835-4ab6-9439-b5644362a06c); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 15 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); Audit machines with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/095e4ed9-c835-4ab6-9439-b5644362a06c); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 11 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); Audit machines with insecure password security settings (/providers/microsoft.authorization/policysetdefinitions/095e4ed9-c835-4ab6-9439-b5644362a06c); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Guest Configuration False False n/a n/a n/a false 0 n/a true 1 HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab) n/a
BuiltIn Guest Configuration False False n/a n/a n/a false 0 n/a true 3 [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a) n/a
BuiltIn Guest Configuration False False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Guest Configuration False False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Guest Configuration False False n/a n/a n/a false 0 n/a true 9 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a) n/a
BuiltIn Guest Configuration False False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 22 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Synapse False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 3 CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 3 CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 3 CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 7 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Event Hub False False n/a n/a AuditIfNotExists false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn Security Center False False n/a n/a Audit false 0 n/a true 9 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Automation False False n/a n/a Audit false 0 n/a true 13 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Automation False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Azure Active Directory False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn API for FHIR False False n/a n/a audit false 0 n/a true 7 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693); Deny or Audit resources without Encryption with a customer-managed key (CMK) (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encryption-cmk) n/a
BuiltIn API for FHIR False False n/a n/a Audit false 0 n/a true 6 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Azure Arc False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Azure Arc False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Azure Arc False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Attestation False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Automation False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Automation False False n/a n/a Audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Backup False False n/a n/a AuditIfNotExists false 0 n/a true 11 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Batch False False n/a n/a Audit false 0 n/a true 6 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693); Deny or Audit resources without Encryption with a customer-managed key (CMK) (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encryption-cmk) n/a
BuiltIn Batch False False n/a n/a Audit false 0 n/a false 0 n/a n/a
Custom Cache False False Mg alz (Azure Landing Zones) Append false 0 n/a true 1 Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit) n/a
Custom Cache False False Mg alz (Azure Landing Zones) Append false 0 n/a true 1 Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit) n/a
Custom Cache False False Mg alz (Azure Landing Zones) Deny false 0 n/a true 1 Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit) n/a
BuiltIn Cache False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Cache False False n/a n/a Audit false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Cache False False n/a n/a AuditIfNotExists false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Search False False n/a n/a Audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Search False False n/a n/a Audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Search False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Search False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Search False False n/a n/a Audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Container Instance False False n/a n/a Audit false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn Container Instance False False n/a n/a Audit false 0 n/a true 6 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Cosmos DB False False n/a n/a Deny false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Cosmos DB False False n/a n/a audit false 0 n/a true 9 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693); Deny or Audit resources without Encryption with a customer-managed key (CMK) (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encryption-cmk) n/a
BuiltIn Cosmos DB False False n/a n/a deny false 0 n/a false 0 n/a n/a
BuiltIn Cosmos DB False False n/a n/a n/a false 0 n/a true 1 Enable Azure Cosmos DB throughput policy (/providers/microsoft.authorization/policysetdefinitions/cb5e1e90-7c33-491c-a15b-24885c915752) n/a
BuiltIn Cosmos DB False False n/a n/a Audit false 0 n/a true 1 Public network access should be disabled for PaaS services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deny-publicpaasendpoints) n/a
BuiltIn Cosmos DB False False n/a n/a deny false 0 n/a true 1 Enable Azure Cosmos DB throughput policy (/providers/microsoft.authorization/policysetdefinitions/cb5e1e90-7c33-491c-a15b-24885c915752) n/a
BuiltIn Data Box False False n/a n/a Audit false 0 n/a true 6 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Data Box False False n/a n/a Audit false 0 n/a true 6 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693); Deny or Audit resources without Encryption with a customer-managed key (CMK) (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encryption-cmk) n/a
BuiltIn Azure Data Explorer False False n/a n/a Audit false 0 n/a true 6 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Data Factory False False n/a n/a Audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Data Factory False False n/a n/a AuditIfNotExists false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
Custom SQL False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit) 'Owner' (8e3af657-a8ff-443c-a75c-2fe8c4bcb635)
Custom SQL False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit) 'Owner' (8e3af657-a8ff-443c-a75c-2fe8c4bcb635)
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 15 IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 6 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 1 Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 6 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 17 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 17 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Internet of Things False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Azure Edge Hardware Center False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Event Grid False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Event Grid False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Event Grid False False n/a n/a Audit false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Event Grid False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Event Grid False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Event Grid False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Event Grid False False n/a n/a Audit false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Event Hub False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Storage False False n/a n/a AuditIfNotExists false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn HDInsight False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn HDInsight False False n/a n/a Audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn HDInsight False False n/a n/a Audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn HDInsight False False n/a n/a Audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn HDInsight False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Internet of Things False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Key Vault False False n/a n/a Audit false 0 n/a true 4 CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a) n/a
BuiltIn Kubernetes False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes False False n/a n/a Audit false 0 n/a true 1 Public network access should be disabled for PaaS services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deny-publicpaasendpoints) n/a
BuiltIn Monitoring False False n/a n/a Audit false 0 n/a false 0 n/a n/a
Custom Machine Learning False False Mg alz (Azure Landing Zones) Deny false 0 n/a false 0 n/a n/a
BuiltIn Machine Learning False False n/a n/a Audit false 0 n/a true 9 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693); Deny or Audit resources without Encryption with a customer-managed key (CMK) (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encryption-cmk) n/a
BuiltIn Machine Learning False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Machine Learning False False n/a n/a Audit false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Machine Learning False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Media Services False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Media Services False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Media Services False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Media Services False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Media Services False False n/a n/a Deny false 0 n/a false 0 n/a n/a
BuiltIn Media Services False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Media Services False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a true 5 CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
BuiltIn Monitoring False False n/a n/a audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Monitoring False False n/a n/a audit false 0 n/a true 6 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Monitoring False False n/a n/a audit false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn Monitoring False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a true 5 CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn Storage False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Storage False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Storage False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Storage False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes False False n/a n/a Audit false 0 n/a true 7 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Azure Purview False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Service Bus False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Service Bus False False n/a n/a AuditIfNotExists false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn SignalR False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn SignalR False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn SignalR False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn SignalR False False n/a n/a Audit false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Platform False False n/a n/a Audit false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn SQL False False n/a n/a Audit false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn SQL False False n/a n/a Audit false 0 n/a false 0 n/a n/a
Custom SQL False False Mg alz (Azure Landing Zones) Audit false 0 n/a true 1 Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit) n/a
BuiltIn SQL False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Azure Stack Edge False False n/a n/a audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
Custom Storage False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit) 'Owner' (8e3af657-a8ff-443c-a75c-2fe8c4bcb635)
BuiltIn Stream Analytics False False n/a n/a audit false 0 n/a true 7 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693); Deny or Audit resources without Encryption with a customer-managed key (CMK) (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encryption-cmk) n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a true 3 CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
BuiltIn Synapse False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Synapse False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Synapse False False n/a n/a Audit false 0 n/a true 7 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693); Deny or Audit resources without Encryption with a customer-managed key (CMK) (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encryption-cmk) n/a
BuiltIn Synapse False False n/a n/a Audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Network False False n/a n/a Audit false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn Network False False n/a n/a Audit false 0 n/a true 9 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Web PubSub False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Web PubSub False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Web PubSub False False n/a n/a Audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Batch False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Bot Service False False n/a n/a audit false 0 n/a false 0 n/a n/a
BuiltIn Bot Service False False n/a n/a audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Bot Service False False n/a n/a audit false 0 n/a false 0 n/a n/a
BuiltIn Bot Service False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes False False n/a n/a Audit false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693); Deny or Audit resources without Encryption with a customer-managed key (CMK) (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encryption-cmk) n/a
BuiltIn Bot Service False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Key Vault False False n/a n/a audit false 0 n/a false 0 n/a n/a
BuiltIn Key Vault False False n/a n/a audit false 0 n/a false 0 n/a n/a
BuiltIn Key Vault False False n/a n/a audit false 0 n/a false 0 n/a n/a
BuiltIn Key Vault False False n/a n/a audit false 0 n/a false 0 n/a n/a
BuiltIn Key Vault False False n/a n/a audit false 0 n/a false 0 n/a n/a
BuiltIn Key Vault False False n/a n/a audit false 0 n/a true 1 CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Cognitive Services False False n/a n/a Audit false 0 n/a true 9 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Cognitive Services False False n/a n/a Audit false 0 n/a true 10 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693); Deny or Audit resources without Encryption with a customer-managed key (CMK) (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encryption-cmk) n/a
BuiltIn Cognitive Services False False n/a n/a Audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Cognitive Services False False n/a n/a Audit false 0 n/a true 9 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Cognitive Services False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Cognitive Services False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Cognitive Services False False n/a n/a Audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Kubernetes False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Azure Kubernetes Service Contributor Role' (ed7f3fbd-7b88-4dd4-9017-9adb7ce333f8)
BuiltIn SQL False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Advanced Threat Protection to be enabled on open-source relational databases (/providers/microsoft.authorization/policysetdefinitions/e77fc0b3-f7e9-4c58-bc13-cb753ed8e46e) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn SQL False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Advanced Threat Protection to be enabled on open-source relational databases (/providers/microsoft.authorization/policysetdefinitions/e77fc0b3-f7e9-4c58-bc13-cb753ed8e46e) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn SQL False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Advanced Threat Protection to be enabled on open-source relational databases (/providers/microsoft.authorization/policysetdefinitions/e77fc0b3-f7e9-4c58-bc13-cb753ed8e46e) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn API Management False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'API Management Service Contributor' (312a565d-c81f-4fd8-895a-4e21e48d571c)
BuiltIn App Configuration False False n/a n/a Modify false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn App Configuration False False n/a n/a Modify false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn App Service False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Website Contributor' (de139f84-1756-47ae-9be6-808fbbe84772)
BuiltIn App Service False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Website Contributor' (de139f84-1756-47ae-9be6-808fbbe84772)
BuiltIn App Service False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Website Contributor' (de139f84-1756-47ae-9be6-808fbbe84772)
BuiltIn App Service False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Website Contributor' (de139f84-1756-47ae-9be6-808fbbe84772)
BuiltIn App Service False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Website Contributor' (de139f84-1756-47ae-9be6-808fbbe84772)
BuiltIn App Service False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Azure PaaS services to use private DNS zones (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones) 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn SQL False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293); 'User Access Administrator' (18d7d88d-d35e-4fb5-a5c3-7773c20a72d9)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a Modify false 0 n/a false 0 n/a 'Application Insights Component Contributor' (ae349356-3a1b-4a5e-921d-050484c6347e)
BuiltIn Azure Arc False False n/a n/a Modify false 0 n/a false 0 n/a 'Azure Connected Machine Resource Administrator' (cd570a14-e51a-42ad-bac8-bafd67325302)
BuiltIn Azure Arc False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Azure Arc False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7); 'Azure Connected Machine Resource Administrator' (cd570a14-e51a-42ad-bac8-bafd67325302)
BuiltIn Azure Arc False False n/a n/a Modify false 0 n/a false 0 n/a 'Azure Connected Machine Resource Administrator' (cd570a14-e51a-42ad-bac8-bafd67325302)
BuiltIn Automation False False n/a n/a Modify false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Automation False False n/a n/a Modify false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Automation False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Cache False False n/a n/a Modify false 0 n/a false 0 n/a 'Redis Cache Contributor' (e0f68234-74aa-48ed-b826-c38b57376e17)
BuiltIn Cache False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Azure PaaS services to use private DNS zones (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones) 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Cache False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Redis Cache Contributor' (e0f68234-74aa-48ed-b826-c38b57376e17)
BuiltIn Search False False n/a n/a Modify false 0 n/a false 0 n/a 'Search Service Contributor' (7ca78c08-252a-4471-8644-bb5ff32d4ba0)
BuiltIn Search False False n/a n/a Modify false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7); 'Search Service Contributor' (7ca78c08-252a-4471-8644-bb5ff32d4ba0)
BuiltIn Search False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Azure PaaS services to use private DNS zones (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones) 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Search False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7); 'Search Service Contributor' (7ca78c08-252a-4471-8644-bb5ff32d4ba0)
BuiltIn Security Center False False n/a n/a DeployIfNotExists false 0 n/a true 1 Deploy Microsoft Defender for Cloud configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-mdfc-config) 'Security Admin' (fb1c8493-542b-48eb-b624-b4c8fea62acd)
BuiltIn Security Center False False n/a n/a DeployIfNotExists false 0 n/a true 1 Deploy Microsoft Defender for Cloud configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-mdfc-config) 'Security Admin' (fb1c8493-542b-48eb-b624-b4c8fea62acd)
BuiltIn Security Center False False n/a n/a DeployIfNotExists false 0 n/a true 1 Deploy Microsoft Defender for Cloud configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-mdfc-config) 'Security Admin' (fb1c8493-542b-48eb-b624-b4c8fea62acd)
BuiltIn Security Center False False n/a n/a DeployIfNotExists false 0 n/a true 1 Deploy Microsoft Defender for Cloud configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-mdfc-config) 'Security Admin' (fb1c8493-542b-48eb-b624-b4c8fea62acd)
BuiltIn Security Center False False n/a n/a DeployIfNotExists false 0 n/a true 1 Deploy Microsoft Defender for Cloud configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-mdfc-config) 'Security Admin' (fb1c8493-542b-48eb-b624-b4c8fea62acd)
BuiltIn Security Center False False n/a n/a DeployIfNotExists false 0 n/a true 1 Deploy Microsoft Defender for Cloud configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-mdfc-config) 'Security Admin' (fb1c8493-542b-48eb-b624-b4c8fea62acd)
BuiltIn Security Center False False n/a n/a DeployIfNotExists false 0 n/a true 1 Deploy Microsoft Defender for Cloud configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-mdfc-config) 'Security Admin' (fb1c8493-542b-48eb-b624-b4c8fea62acd)
BuiltIn Security Center False False n/a n/a DeployIfNotExists false 0 n/a true 1 Deploy Microsoft Defender for Cloud configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-mdfc-config) 'Security Admin' (fb1c8493-542b-48eb-b624-b4c8fea62acd)
BuiltIn Security Center False False n/a n/a DeployIfNotExists false 0 n/a true 1 Deploy Microsoft Defender for Cloud configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-mdfc-config) 'Security Admin' (fb1c8493-542b-48eb-b624-b4c8fea62acd)
BuiltIn SQL False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Azure Defender to be enabled on SQL Servers and SQL Managed Instances (/providers/microsoft.authorization/policysetdefinitions/9cb3cc7a-b39b-4b82-bc89-e5a5d9ff7b97) 'SQL Security Manager' (056cd41c-7e88-42e1-933e-88ba6a50c9c3)
BuiltIn SQL False False n/a n/a n/a false 0 n/a true 2 [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); Configure Azure Defender to be enabled on SQL Servers and SQL Managed Instances (/providers/microsoft.authorization/policysetdefinitions/9cb3cc7a-b39b-4b82-bc89-e5a5d9ff7b97) 'SQL Security Manager' (056cd41c-7e88-42e1-933e-88ba6a50c9c3)
BuiltIn Event Grid False False n/a n/a Modify false 0 n/a false 0 n/a 'EventGrid Contributor' (1e241071-0855-49ea-94dc-649edcd759de)
BuiltIn Event Grid False False n/a n/a Modify false 0 n/a false 0 n/a 'EventGrid Contributor' (1e241071-0855-49ea-94dc-649edcd759de)
BuiltIn Event Grid False False n/a n/a Modify false 0 n/a false 0 n/a 'EventGrid Contributor' (1e241071-0855-49ea-94dc-649edcd759de)
BuiltIn Event Hub False False n/a n/a Modify false 0 n/a false 0 n/a 'Azure Event Hubs Data Owner' (f526a384-b230-433a-b45c-95f59c4a2dec)
BuiltIn Storage False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Azure PaaS services to use private DNS zones (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones) 'Private DNS Zone Contributor' (b12aa53e-6015-4669-85d0-8515ebb3ae7f); 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Storage False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn HDInsight False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn HDInsight False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Internet of Things False False n/a n/a Modify false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Monitoring False False n/a n/a Modify false 0 n/a false 0 n/a 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Machine Learning False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Azure PaaS services to use private DNS zones (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones) 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Machine Learning False False n/a n/a Modify false 0 n/a false 0 n/a 'AzureML Data Scientist' (f6c7c914-8db3-469d-8ca1-694a8f32e121)
BuiltIn Machine Learning False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Media Services False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Media Services False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7); 'Media Services Account Administrator' (054126f8-9a2b-4f1c-a9ad-eca461f08466)
BuiltIn Migrate False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Monitoring False False n/a n/a Modify false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Service Bus False False n/a n/a Modify false 0 n/a false 0 n/a 'Azure Service Bus Data Owner' (090c5cfd-751d-490a-894a-3ce6f1109419)
BuiltIn SignalR False False n/a n/a Modify false 0 n/a false 0 n/a 'SignalR/Web PubSub Contributor' (8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761)
BuiltIn SQL False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'SQL Security Manager' (056cd41c-7e88-42e1-933e-88ba6a50c9c3); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn SQL False False n/a n/a Modify false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) 'SQL Server Contributor' (6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437)
BuiltIn SQL False False n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7); 'SQL Server Contributor' (6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437)
BuiltIn Synapse False False n/a n/a Modify false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Synapse False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Synapse False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Web PubSub False False n/a n/a Modify false 0 n/a false 0 n/a 'SignalR/Web PubSub Contributor' (8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761)
BuiltIn Web PubSub False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Azure PaaS services to use private DNS zones (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones) 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Web PubSub False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7); 'SignalR/Web PubSub Contributor' (8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761)
BuiltIn Backup False False n/a n/a deployIfNotExists false 0 n/a false 0 n/a 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c); 'Backup Contributor' (5e467623-bb1f-42f4-a55d-6e525e11384b)
BuiltIn Backup False False n/a n/a deployIfNotExists false 0 n/a false 0 n/a 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c); 'Backup Contributor' (5e467623-bb1f-42f4-a55d-6e525e11384b)
BuiltIn Backup False False n/a n/a deployIfNotExists false 0 n/a false 0 n/a 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c); 'Backup Contributor' (5e467623-bb1f-42f4-a55d-6e525e11384b)
BuiltIn Backup False False n/a n/a deployIfNotExists false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c); 'Backup Contributor' (5e467623-bb1f-42f4-a55d-6e525e11384b)
BuiltIn Batch False False n/a n/a Modify false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Batch False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Bot Service False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Bot Service False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Cognitive Services False False n/a n/a Modify false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Cognitive Services False False n/a n/a Modify false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Cognitive Services False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Azure PaaS services to use private DNS zones (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones) 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Cognitive Services False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7); 'Cognitive Services Contributor' (25fbc0a9-bd7c-42a3-aa1a-3b75d497ee68)
BuiltIn Container Registry False False n/a n/a Modify false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Container Registry False False n/a n/a Modify false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Container Registry False False n/a n/a Modify false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Container Registry False False n/a n/a Modify false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Container Registry False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Azure PaaS services to use private DNS zones (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones) 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Container Registry False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Cosmos DB False False n/a n/a Modify false 0 n/a false 0 n/a 'DocumentDB Account Contributor' (5bd9cd88-fe45-4216-938b-f97437e15450)
BuiltIn Cosmos DB False False n/a n/a Modify false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c); 'DocumentDB Account Contributor' (5bd9cd88-fe45-4216-938b-f97437e15450)
BuiltIn Cosmos DB False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Cosmos DB False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c); 'DocumentDB Account Contributor' (5bd9cd88-fe45-4216-938b-f97437e15450)
BuiltIn Data Factory False False n/a n/a Modify false 0 n/a false 0 n/a 'Data Factory Contributor' (673868aa-7521-48a0-acc6-0f60742d39f5)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 1 Enable Azure Monitor for VMs (/providers/microsoft.authorization/policysetdefinitions/55f3eceb-5573-4f18-9695-226972c6d74a) 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 1 Enable Azure Monitor for VMs (/providers/microsoft.authorization/policysetdefinitions/55f3eceb-5573-4f18-9695-226972c6d74a) 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Network False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Storage False False n/a n/a DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Compute False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Owner' (8e3af657-a8ff-443c-a75c-2fe8c4bcb635)
BuiltIn Compute False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Azure PaaS services to use private DNS zones (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones) 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Compute False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Event Hub False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Azure PaaS services to use private DNS zones (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones) 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Event Hub False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7); 'Azure Event Hubs Data Owner' (f526a384-b230-433a-b45c-95f59c4a2dec)
BuiltIn Internet of Things False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Azure PaaS services to use private DNS zones (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Internet of Things False False n/a n/a Modify false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Internet of Things False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Kubernetes False False n/a n/a deployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Kubernetes False False n/a n/a deployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Kubernetes False False n/a n/a deployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Linux machines to run Azure Monitor Agent and associate them to a Data Collection Rule (/providers/microsoft.authorization/policysetdefinitions/118f04da-0375-44d1-84e3-0fd9e1849403) 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Linux machines to run Azure Monitor Agent and associate them to a Data Collection Rule (/providers/microsoft.authorization/policysetdefinitions/118f04da-0375-44d1-84e3-0fd9e1849403) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Linux machines to run Azure Monitor Agent and associate them to a Data Collection Rule (/providers/microsoft.authorization/policysetdefinitions/118f04da-0375-44d1-84e3-0fd9e1849403) 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 2 Configure Linux machines to run Azure Monitor Agent and associate them to a Data Collection Rule (/providers/microsoft.authorization/policysetdefinitions/118f04da-0375-44d1-84e3-0fd9e1849403); [Preview]: Configure machines to automatically install the Azure Monitor and Azure Security agents on virtual machines (/providers/microsoft.authorization/policysetdefinitions/a15f3269-2e10-458c-87a4-d5989e678a73) 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 1 Enable Azure Monitor for VMs (/providers/microsoft.authorization/policysetdefinitions/55f3eceb-5573-4f18-9695-226972c6d74a) 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 1 Enable Azure Monitor for VMs (/providers/microsoft.authorization/policysetdefinitions/55f3eceb-5573-4f18-9695-226972c6d74a) 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Machine Learning False False n/a n/a Modify false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Compute False False n/a n/a Modify false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Security Center False False n/a n/a DeployIfNotExists false 0 n/a true 1 Deploy Microsoft Defender for Cloud configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-mdfc-config) 'Security Admin' (fb1c8493-542b-48eb-b624-b4c8fea62acd)
BuiltIn Network False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Network False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn App Configuration False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Azure PaaS services to use private DNS zones (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones) 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Data Factory False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Automation False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7); 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn App Configuration False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Data Factory False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Data Factory Contributor' (673868aa-7521-48a0-acc6-0f60742d39f5)
BuiltIn SignalR False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7); 'SignalR/Web PubSub Contributor' (8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761)
BuiltIn Service Bus False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Azure PaaS services to use private DNS zones (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones) 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Service Bus False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7); 'Azure Service Bus Data Owner' (090c5cfd-751d-490a-894a-3ce6f1109419)
BuiltIn SQL False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'SQL Security Manager' (056cd41c-7e88-42e1-933e-88ba6a50c9c3); 'Storage Account Contributor' (17d1049b-9a84-46fb-8f53-869881c3d3ab)
BuiltIn Storage False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7); 'Storage Account Contributor' (17d1049b-9a84-46fb-8f53-869881c3d3ab)
BuiltIn Synapse False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'SQL Security Manager' (056cd41c-7e88-42e1-933e-88ba6a50c9c3); 'Storage Account Contributor' (17d1049b-9a84-46fb-8f53-869881c3d3ab)
BuiltIn Guest Configuration False False n/a n/a n/a false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Automanage False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Windows machines to run Azure Monitor Agent and associate them to a Data Collection Rule (/providers/microsoft.authorization/policysetdefinitions/9575b8b7-78ab-4281-b53b-d3c1ace2260b) 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Windows machines to run Azure Monitor Agent and associate them to a Data Collection Rule (/providers/microsoft.authorization/policysetdefinitions/9575b8b7-78ab-4281-b53b-d3c1ace2260b) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Windows machines to run Azure Monitor Agent and associate them to a Data Collection Rule (/providers/microsoft.authorization/policysetdefinitions/9575b8b7-78ab-4281-b53b-d3c1ace2260b) 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 2 Configure Windows machines to run Azure Monitor Agent and associate them to a Data Collection Rule (/providers/microsoft.authorization/policysetdefinitions/9575b8b7-78ab-4281-b53b-d3c1ace2260b); [Preview]: Configure machines to automatically install the Azure Monitor and Azure Security agents on virtual machines (/providers/microsoft.authorization/policysetdefinitions/a15f3269-2e10-458c-87a4-d5989e678a73) 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 3 CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn Container Registry False False n/a n/a Audit false 0 n/a true 11 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693); Deny or Audit resources without Encryption with a customer-managed key (CMK) (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encryption-cmk) n/a
BuiltIn Container Registry False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Container Registry False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Container Registry False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Container Registry False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Container Registry False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Container Registry False False n/a n/a Audit false 0 n/a true 10 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Container Registry False False n/a n/a Audit false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 10 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
Custom Machine Learning False False Mg alz (Azure Landing Zones) Audit false 0 n/a false 0 n/a n/a
BuiltIn API for FHIR False False n/a n/a audit false 0 n/a true 1 CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
BuiltIn Healthcare APIs False False n/a n/a audit false 0 n/a false 0 n/a n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 16 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Cosmos DB False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Network False False n/a n/a Audit false 0 n/a true 3 [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab) n/a
BuiltIn Cosmos DB False False n/a n/a Audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
Custom Machine Learning False False Mg alz (Azure Landing Zones) Deny false 0 n/a false 0 n/a n/a
Custom Databricks False False Mg alz (Azure Landing Zones) Deny false 0 n/a false 0 n/a n/a
Custom Databricks False False Mg alz (Azure Landing Zones) Deny false 0 n/a false 0 n/a n/a
Custom Machine Learning False False Mg alz (Azure Landing Zones) Deny false 0 n/a false 0 n/a n/a
Custom Machine Learning False False Mg alz (Azure Landing Zones) Deny false 0 n/a false 0 n/a n/a
Custom Databricks False False Mg alz (Azure Landing Zones) Deny false 0 n/a false 0 n/a n/a
Custom Network False False Mg alz (Azure Landing Zones) Deny false 0 n/a false 0 n/a n/a
Custom Network False False Mg alz (Azure Landing Zones) Deny false 0 n/a false 0 n/a n/a
Custom Network False False Mg alz (Azure Landing Zones) Deny false 0 n/a false 0 n/a n/a
Custom Network False False Mg alz (Azure Landing Zones) Deny false 0 n/a false 0 n/a n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a true 2 Enable Azure Monitor for VMs (/providers/microsoft.authorization/policysetdefinitions/55f3eceb-5573-4f18-9695-226972c6d74a); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2) n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a true 3 [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); Enable Azure Monitor for Virtual Machine Scale Sets (/providers/microsoft.authorization/policysetdefinitions/75714362-cae7-409e-9b99-a8e5075b7fad); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2) n/a
BuiltIn Event Grid False False n/a n/a deployIfNotExists false 0 n/a true 1 Configure Azure PaaS services to use private DNS zones (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones) 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Event Grid False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7); 'EventGrid Contributor' (1e241071-0855-49ea-94dc-649edcd759de)
BuiltIn Event Grid False False n/a n/a deployIfNotExists false 0 n/a true 1 Configure Azure PaaS services to use private DNS zones (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones) 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Event Grid False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7); 'EventGrid Contributor' (1e241071-0855-49ea-94dc-649edcd759de)
BuiltIn Internet of Things False False n/a n/a deployIfNotExists false 0 n/a true 1 Configure Azure PaaS services to use private DNS zones (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones) 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7); 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Internet of Things False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7); 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 1 Enable Azure Monitor for Virtual Machine Scale Sets (/providers/microsoft.authorization/policysetdefinitions/75714362-cae7-409e-9b99-a8e5075b7fad) 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 1 Enable Azure Monitor for VMs (/providers/microsoft.authorization/policysetdefinitions/55f3eceb-5573-4f18-9695-226972c6d74a) 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Key Vault False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Kubernetes False False n/a n/a DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn SQL False False n/a n/a DeployIfNotExists false 0 n/a true 2 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Key Vault False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 2 Enable Azure Monitor for Virtual Machine Scale Sets (/providers/microsoft.authorization/policysetdefinitions/75714362-cae7-409e-9b99-a8e5075b7fad); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293); 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 2 Enable Azure Monitor for VMs (/providers/microsoft.authorization/policysetdefinitions/55f3eceb-5573-4f18-9695-226972c6d74a); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn SignalR False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Azure PaaS services to use private DNS zones (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones) 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Batch False False n/a n/a DeployIfNotExists false 0 n/a true 1 Configure Azure PaaS services to use private DNS zones (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones) 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Security Center False False n/a n/a n/a false 0 n/a false 0 n/a 'Security Admin' (fb1c8493-542b-48eb-b624-b4c8fea62acd)
Custom Budget False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Network False False n/a n/a n/a false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
Custom Network False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn SQL False False n/a n/a n/a false 0 n/a false 0 n/a 'SQL Security Manager' (056cd41c-7e88-42e1-933e-88ba6a50c9c3); 'Storage Account Contributor' (17d1049b-9a84-46fb-8f53-869881c3d3ab)
BuiltIn Cosmos DB False False n/a n/a DeployIfNotExists false 0 n/a true 1 CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) 'Security Admin' (fb1c8493-542b-48eb-b624-b4c8fea62acd)
BuiltIn Storage False False n/a n/a DeployIfNotExists false 0 n/a true 2 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) 'Security Admin' (fb1c8493-542b-48eb-b624-b4c8fea62acd)
Custom Network False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Custom Provider False False n/a n/a n/a false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Managed Application False False n/a n/a n/a false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
Custom Network False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Kubernetes False False n/a n/a DeployIfNotExists false 0 n/a false 0 n/a 'Azure Kubernetes Service Contributor Role' (ed7f3fbd-7b88-4dd4-9017-9adb7ce333f8); 'Azure Kubernetes Service Policy Add-on Deployment' (18ed5180-3e48-46fd-8541-4ea054d57064)
Custom Security Center False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Microsoft Defender for Cloud configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-mdfc-config) 'Security Admin' (fb1c8493-542b-48eb-b624-b4c8fea62acd)
BuiltIn Compute False False n/a n/a n/a false 0 n/a true 2 [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab) 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Monitoring False False n/a n/a n/a false 0 n/a true 1 Enable Azure Monitor for Virtual Machine Scale Sets (/providers/microsoft.authorization/policysetdefinitions/75714362-cae7-409e-9b99-a8e5075b7fad) 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Monitoring False False n/a n/a n/a false 0 n/a true 1 Enable Azure Monitor for VMs (/providers/microsoft.authorization/policysetdefinitions/55f3eceb-5573-4f18-9695-226972c6d74a) 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn SQL False False n/a n/a n/a false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 2 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 2 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 2 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Key Vault False False n/a n/a n/a false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 2 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 2 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a n/a false 0 n/a true 2 [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Storage Account Contributor' (17d1049b-9a84-46fb-8f53-869881c3d3ab)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Backup False False n/a n/a n/a false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 2 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 2 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Monitoring False False n/a n/a DeployIfNotExists false 0 n/a true 2 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Security Center False False n/a n/a n/a false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Security Center False False n/a n/a n/a false 0 n/a true 1 Deploy Microsoft Defender for Cloud configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-mdfc-config) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Monitoring False False n/a n/a n/a false 0 n/a true 1 Enable Azure Monitor for Virtual Machine Scale Sets (/providers/microsoft.authorization/policysetdefinitions/75714362-cae7-409e-9b99-a8e5075b7fad) 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293); 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Monitoring False False n/a n/a n/a false 0 n/a true 1 Enable Azure Monitor for VMs (/providers/microsoft.authorization/policysetdefinitions/55f3eceb-5573-4f18-9695-226972c6d74a) 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Network False False n/a n/a n/a false 0 n/a true 1 HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab) 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
Custom SQL False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy SQL Database built-in SQL security configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-sql-security) 'SQL Security Manager' (056cd41c-7e88-42e1-933e-88ba6a50c9c3)
Custom SQL False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy SQL Database built-in SQL security configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-sql-security) 'SQL Security Manager' (056cd41c-7e88-42e1-933e-88ba6a50c9c3)
Custom SQL False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy SQL Database built-in SQL security configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-sql-security) 'SQL Security Manager' (056cd41c-7e88-42e1-933e-88ba6a50c9c3)
Custom SQL False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deploy SQL Database built-in SQL security configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-sql-security) 'SQL Security Manager' (056cd41c-7e88-42e1-933e-88ba6a50c9c3); 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa)
BuiltIn SQL False False n/a n/a n/a false 0 n/a false 0 n/a 'SQL DB Contributor' (9b7fa17d-e63e-47b0-bb0a-15c516ac86ec)
BuiltIn Guest Configuration False False n/a n/a n/a false 0 n/a true 17 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); Deploy prerequisites to enable Guest Configuration policies on virtual machines (/providers/microsoft.authorization/policysetdefinitions/12794019-7a00-42cf-95c2-882eed337cc8); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Guest Configuration False False n/a n/a n/a false 0 n/a true 19 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); Deploy prerequisites to enable Guest Configuration policies on virtual machines (/providers/microsoft.authorization/policysetdefinitions/12794019-7a00-42cf-95c2-882eed337cc8); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
Custom Network False False Mg alz (Azure Landing Zones) n/a false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
Custom Guest Configuration False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a false 0 n/a 'Virtual Machine Contributor' (9980e02c-c2be-4d73-94e8-173b1dc7cf3c)
BuiltIn Security Center False False n/a n/a n/a false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Security Center False False n/a n/a n/a false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Security Center False False n/a n/a n/a false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a false 0 n/a 'Monitoring Contributor' (749f88d5-cbae-40b8-bcfc-e573ddc772fa); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
Custom Monitoring False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7); 'Storage Account Key Operator Service Role' (81a9662b-bebf-436f-a333-f67b29880f12); 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293); 'Storage Account Contributor' (17d1049b-9a84-46fb-8f53-869881c3d3ab); 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 19 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 20 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 3 CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn Compute False False n/a n/a AuditIfNotExists false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Azure Data Explorer False False n/a n/a Audit false 0 n/a true 6 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Azure Data Explorer False False n/a n/a Audit false 0 n/a true 6 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 11 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 11 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a n/a false 0 n/a false 0 n/a 'Security Admin' (fb1c8493-542b-48eb-b624-b4c8fea62acd)
BuiltIn Security Center False False n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Security Center False False n/a n/a DeployIfNotExists false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 1 Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 1 Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 18 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
Custom Budget False False Mg alz (Azure Landing Zones) Deny false 0 n/a false 0 n/a n/a
BuiltIn SQL False False n/a n/a Audit false 0 n/a true 13 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn SQL False False n/a n/a Audit false 0 n/a true 13 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
Custom Machine Learning False False Mg alz (Azure Landing Zones) Deny false 0 n/a false 0 n/a n/a
Custom Machine Learning False False Mg alz (Azure Landing Zones) Deny false 0 n/a false 0 n/a n/a
BuiltIn App Service False False n/a n/a Audit false 0 n/a true 10 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Kubernetes False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 10 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 10 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 10 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 14 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 14 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 14 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 14 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 14 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 14 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 14 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 14 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a Audit false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Event Hub False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Event Hub False False n/a n/a Audit false 0 n/a true 6 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Event Hub False False n/a n/a AuditIfNotExists false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Network False False n/a n/a AuditIfNotExists false 0 n/a true 3 [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 23 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 18 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 21 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Network False False n/a n/a Audit false 0 n/a true 3 Flow logs should be configured and enabled for every network security group (/providers/microsoft.authorization/policysetdefinitions/62329546-775b-4a3d-a4cb-eb4bb990d2c0); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
BuiltIn Network False False n/a n/a Audit false 0 n/a true 2 Flow logs should be configured and enabled for every network security group (/providers/microsoft.authorization/policysetdefinitions/62329546-775b-4a3d-a4cb-eb4bb990d2c0); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 11 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 11 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 11 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a Audit false 0 n/a true 20 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
Custom App Service False False Mg alz (Azure Landing Zones) Deny false 0 n/a true 1 Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit) n/a
BuiltIn App Service False False n/a n/a Audit false 0 n/a true 10 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Network False False n/a n/a n/a false 0 n/a true 1 HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab) n/a
BuiltIn SQL False False n/a n/a Audit false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn SQL False False n/a n/a Audit false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn SQL False False n/a n/a Audit false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Storage False False n/a n/a Audit false 0 n/a true 6 NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Automanage False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Storage False False n/a n/a Audit false 0 n/a true 6 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn SQL False False n/a n/a Audit false 0 n/a true 7 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn SQL False False n/a n/a Audit false 0 n/a true 7 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Tags False False n/a n/a n/a false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Tags False False n/a n/a n/a false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Tags False False n/a n/a n/a false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Tags False False n/a n/a n/a false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 14 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Internet of Things False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Internet of Things False False n/a n/a Audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Synapse False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 11 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Key Vault False False n/a n/a Audit false 0 n/a true 9 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Key Vault False False n/a n/a Audit false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Network False False n/a n/a Audit false 0 n/a true 3 [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab) n/a
BuiltIn Key Vault False False n/a n/a Audit false 0 n/a true 14 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Key Vault False False n/a n/a Audit false 0 n/a true 10 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Key Vault False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Key Vault False False n/a n/a Audit false 0 n/a true 1 CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
BuiltIn Key Vault False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Key Vault False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Key Vault False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Key Vault False False n/a n/a Audit false 0 n/a true 1 CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
BuiltIn Key Vault False False n/a n/a Audit false 0 n/a true 1 CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
Custom Key Vault False False Mg alz (Azure Landing Zones) n/a false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes False False n/a n/a deny false 0 n/a true 7 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Kubernetes False False n/a n/a audit false 0 n/a true 9 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); Kubernetes cluster pod security restricted standards for Linux-based workloads (/providers/microsoft.authorization/policysetdefinitions/42b8ef37-b724-4e24-bbc8-7a7708edfe00); Kubernetes cluster pod security baseline standards for Linux-based workloads (/providers/microsoft.authorization/policysetdefinitions/a8640138-9b0a-4a28-b8cb-1666c838647d); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Kubernetes False False n/a n/a audit false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes False False n/a n/a audit false 0 n/a true 7 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Kubernetes False False n/a n/a audit false 0 n/a true 10 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); Kubernetes cluster pod security restricted standards for Linux-based workloads (/providers/microsoft.authorization/policysetdefinitions/42b8ef37-b724-4e24-bbc8-7a7708edfe00); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); Kubernetes cluster pod security baseline standards for Linux-based workloads (/providers/microsoft.authorization/policysetdefinitions/a8640138-9b0a-4a28-b8cb-1666c838647d); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Kubernetes False False n/a n/a deny false 0 n/a true 7 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Kubernetes False False n/a n/a audit false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes False False n/a n/a audit false 0 n/a true 1 Kubernetes cluster pod security restricted standards for Linux-based workloads (/providers/microsoft.authorization/policysetdefinitions/42b8ef37-b724-4e24-bbc8-7a7708edfe00) n/a
BuiltIn Kubernetes False False n/a n/a audit false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Kubernetes False False n/a n/a audit false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes False False n/a n/a audit false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); Kubernetes cluster pod security baseline standards for Linux-based workloads (/providers/microsoft.authorization/policysetdefinitions/a8640138-9b0a-4a28-b8cb-1666c838647d); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Kubernetes False False n/a n/a audit false 0 n/a true 9 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); Kubernetes cluster pod security restricted standards for Linux-based workloads (/providers/microsoft.authorization/policysetdefinitions/42b8ef37-b724-4e24-bbc8-7a7708edfe00); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Kubernetes False False n/a n/a audit false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes False False n/a n/a audit false 0 n/a true 1 Kubernetes cluster pod security restricted standards for Linux-based workloads (/providers/microsoft.authorization/policysetdefinitions/42b8ef37-b724-4e24-bbc8-7a7708edfe00) n/a
BuiltIn Kubernetes False False n/a n/a audit false 0 n/a true 11 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); Kubernetes cluster pod security restricted standards for Linux-based workloads (/providers/microsoft.authorization/policysetdefinitions/42b8ef37-b724-4e24-bbc8-7a7708edfe00); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); Kubernetes cluster pod security baseline standards for Linux-based workloads (/providers/microsoft.authorization/policysetdefinitions/a8640138-9b0a-4a28-b8cb-1666c838647d); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Kubernetes False False n/a n/a deny false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes False False n/a n/a deny false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Kubernetes False False n/a n/a audit false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn Kubernetes False False n/a n/a deny false 0 n/a true 10 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); Kubernetes cluster pod security restricted standards for Linux-based workloads (/providers/microsoft.authorization/policysetdefinitions/42b8ef37-b724-4e24-bbc8-7a7708edfe00); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); Kubernetes cluster pod security baseline standards for Linux-based workloads (/providers/microsoft.authorization/policysetdefinitions/a8640138-9b0a-4a28-b8cb-1666c838647d); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Kubernetes False False n/a n/a deny false 0 n/a true 9 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693); Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit) n/a
BuiltIn Kubernetes False False n/a n/a audit false 0 n/a true 1 Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8) n/a
BuiltIn Kubernetes False False n/a n/a audit false 0 n/a true 9 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); Kubernetes cluster pod security restricted standards for Linux-based workloads (/providers/microsoft.authorization/policysetdefinitions/42b8ef37-b724-4e24-bbc8-7a7708edfe00); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Kubernetes False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes False False n/a n/a audit false 0 n/a true 1 Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8) n/a
BuiltIn Kubernetes False False n/a n/a audit false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes False False n/a n/a audit false 0 n/a true 1 Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8) n/a
BuiltIn Kubernetes False False n/a n/a deny false 0 n/a false 0 n/a n/a
BuiltIn Security Center False False n/a n/a Audit false 0 n/a true 10 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 17 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693); Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 17 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693); Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 17 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693); Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit) n/a
Custom Budget False False Mg alz (Azure Landing Zones) Deny false 0 n/a false 0 n/a n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 1 Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 7 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a true 8 IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); Enable Azure Monitor for Virtual Machine Scale Sets (/providers/microsoft.authorization/policysetdefinitions/75714362-cae7-409e-9b99-a8e5075b7fad); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a) n/a
BuiltIn Monitoring False False n/a n/a audit false 0 n/a false 0 n/a n/a
BuiltIn Monitoring False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 3 CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 3 CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn Logic Apps False False n/a n/a Audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Logic Apps False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 10 NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Machine Learning False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Compute False False n/a n/a Audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Compute False False n/a n/a Audit false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn Compute False False n/a n/a Audit false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 11 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Synapse False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 19 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 11 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn Batch False False n/a n/a AuditIfNotExists false 0 n/a true 1 [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 23 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 22 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 20 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Compute False False n/a n/a AuditIfNotExists false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 11 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Compute False False n/a n/a AuditIfNotExists false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
BuiltIn Event Grid False False n/a n/a Modify false 0 n/a false 0 n/a 'EventGrid Contributor' (1e241071-0855-49ea-94dc-649edcd759de)
BuiltIn Event Grid False False n/a n/a Modify false 0 n/a false 0 n/a 'EventGrid Contributor' (1e241071-0855-49ea-94dc-649edcd759de)
BuiltIn Storage False False n/a n/a Modify false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn Internet of Things False False n/a n/a Modify false 0 n/a false 0 n/a 'Contributor' (b24988ac-6180-42a0-ab88-20f7382dd24c)
BuiltIn SignalR False False n/a n/a Modify false 0 n/a false 0 n/a 'SignalR/Web PubSub Contributor' (8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761)
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 22 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
Custom SQL False False Mg alz (Azure Landing Zones) Deny false 0 n/a true 1 Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit) n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 9 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693); Deny or Audit resources without Encryption with a customer-managed key (CMK) (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encryption-cmk) n/a
BuiltIn Network False False n/a n/a n/a false 0 n/a true 1 [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8) n/a
BuiltIn Network False False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Network False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Network False False n/a n/a AuditIfNotExists false 0 n/a true 14 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
Custom Automation False False Mg alz (Azure Landing Zones) Deny false 0 n/a false 0 n/a n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn General False False n/a n/a Deny false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn Compute False False n/a n/a Audit false 0 n/a true 3 CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn Cache False False n/a n/a Audit false 0 n/a true 19 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Compute False False n/a n/a Audit false 0 n/a true 6 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
Custom SQL False False Mg alz (Azure Landing Zones) Deny false 0 n/a true 1 Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit) n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 10 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693); Deny or Audit resources without Encryption with a customer-managed key (CMK) (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encryption-cmk) n/a
BuiltIn Automation False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn SQL False False n/a n/a Audit false 0 n/a true 9 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Batch False False n/a n/a AuditIfNotExists false 0 n/a true 1 New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a) n/a
BuiltIn Internet of Things False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 10 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 10 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 10 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Guest Configuration False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a true 1 Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics) 'Log Analytics Contributor' (92aaf0da-9dab-42b6-94a3-d43ce8d16293)
BuiltIn Data Factory False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Internet of Things False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn SQL False False n/a n/a Audit false 0 n/a true 11 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693); Public network access should be disabled for PaaS services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deny-publicpaasendpoints) n/a
BuiltIn Storage False False n/a n/a Audit false 0 n/a true 1 Public network access should be disabled for PaaS services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deny-publicpaasendpoints) n/a
BuiltIn Batch False False n/a n/a Audit false 0 n/a true 1 Public network access should be disabled for PaaS services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deny-publicpaasendpoints) n/a
BuiltIn Container Registry False False n/a n/a Audit false 0 n/a true 2 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); Public network access should be disabled for PaaS services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deny-publicpaasendpoints) n/a
Custom SQL False False Mg alz (Azure Landing Zones) Deny false 0 n/a false 0 n/a n/a
BuiltIn SQL False False n/a n/a Audit false 0 n/a true 10 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn SQL False False n/a n/a Audit false 0 n/a true 3 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); Public network access should be disabled for PaaS services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deny-publicpaasendpoints) n/a
BuiltIn SQL False False n/a n/a Audit false 0 n/a true 10 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn SQL False False n/a n/a Audit false 0 n/a true 3 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); Public network access should be disabled for PaaS services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deny-publicpaasendpoints) n/a
BuiltIn SQL False False n/a n/a Audit false 0 n/a true 10 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Storage False False n/a n/a Audit false 0 n/a false 0 n/a n/a
Custom Network False False Mg alz (Azure Landing Zones) Deny false 0 n/a false 0 n/a n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 18 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 18 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 18 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Tags False False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Tags False False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Tags False False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Tags False False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Compute False False n/a n/a n/a false 0 n/a false 0 n/a n/a
BuiltIn Data Lake False False n/a n/a n/a false 0 n/a true 2 HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
BuiltIn App Service False False n/a n/a AuditIfNotExists false 0 n/a true 7 Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b) n/a
BuiltIn Data Lake False False n/a n/a AuditIfNotExists false 0 n/a true 11 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Key Vault False False n/a n/a AuditIfNotExists false 0 n/a true 3 CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab) n/a
BuiltIn Kubernetes False False n/a n/a AuditIfNotExists false 0 n/a true 1 Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8) n/a
BuiltIn Stream Analytics False False n/a n/a AuditIfNotExists false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Batch False False n/a n/a AuditIfNotExists false 0 n/a true 11 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Data Lake False False n/a n/a AuditIfNotExists false 0 n/a true 11 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Event Hub False False n/a n/a AuditIfNotExists false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Internet of Things False False n/a n/a AuditIfNotExists false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Key Vault False False n/a n/a AuditIfNotExists false 0 n/a true 13 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Logic Apps False False n/a n/a AuditIfNotExists false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Search False False n/a n/a AuditIfNotExists false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Service Bus False False n/a n/a AuditIfNotExists false 0 n/a true 11 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Compute False False n/a n/a AuditIfNotExists false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a Audit false 0 n/a true 11 NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 1 Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8) n/a
BuiltIn Monitoring False False n/a n/a audit false 0 n/a true 6 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Key Vault False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Key Vault False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Key Vault False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Key Vault False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Storage False False n/a n/a Audit false 0 n/a true 22 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a Audit false 0 n/a true 1 CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
BuiltIn Service Bus False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Service Bus False False n/a n/a Audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Service Fabric False False n/a n/a Audit false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Service Fabric False False n/a n/a Audit false 0 n/a true 16 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Portal False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 3 CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn SQL False False n/a n/a Deny false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 20 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn SQL False False n/a n/a Audit false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
Custom SQL False False Mg alz (Azure Landing Zones) Audit false 0 n/a true 1 Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit) n/a
Custom SQL False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit) 'Owner' (8e3af657-a8ff-443c-a75c-2fe8c4bcb635)
BuiltIn SQL False False n/a n/a Deny false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn SQL False False n/a n/a Audit false 0 n/a true 14 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Data Factory False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Network False False n/a n/a AuditIfNotExists false 0 n/a true 3 [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab) n/a
Custom SQL False False Mg alz (Azure Landing Zones) DeployIfNotExists false 0 n/a true 1 Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit) 'Owner' (8e3af657-a8ff-443c-a75c-2fe8c4bcb635)
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 7 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn SQL False False n/a n/a Audit false 0 n/a true 14 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 10 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a true 3 CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn Storage False False n/a n/a Audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Storage False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Storage False False n/a n/a Audit false 0 n/a true 1 New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a) n/a
Custom Storage False False Mg alz (Azure Landing Zones) Deny false 0 n/a true 1 Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit) n/a
BuiltIn Storage False False n/a n/a Audit false 0 n/a true 4 CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
BuiltIn Storage False False n/a n/a Deny false 0 n/a false 0 n/a n/a
BuiltIn Storage False False n/a n/a Audit false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Storage False False n/a n/a Audit false 0 n/a true 7 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Storage False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Storage False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Storage False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Storage False False n/a n/a Audit false 0 n/a true 23 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693); Public network access should be disabled for PaaS services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deny-publicpaasendpoints) n/a
BuiltIn Storage False False n/a n/a Audit false 0 n/a true 9 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Network False False n/a n/a Audit false 0 n/a true 3 [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab) n/a
BuiltIn Storage False False n/a n/a Audit false 0 n/a true 12 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693); Deny or Audit resources without Encryption with a customer-managed key (CMK) (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encryption-cmk) n/a
BuiltIn Storage False False n/a n/a AuditIfNotExists false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Stream Analytics False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 13 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
Custom Network False False Mg alz (Azure Landing Zones) Deny false 0 n/a false 0 n/a n/a
Custom Network False False Mg alz (Azure Landing Zones) Deny false 0 n/a false 0 n/a n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 13 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Synapse False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Synapse False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Synapse False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 18 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 23 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Storage False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Kubernetes False False n/a n/a Audit false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a true 6 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 18 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 24 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Video Analyzers False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Compute False False n/a n/a Audit false 0 n/a true 6 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a true 6 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
BuiltIn Network False False n/a n/a Audit false 0 n/a true 3 [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab) n/a
BuiltIn Compute False False n/a n/a Audit false 0 n/a true 14 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 23 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693); Deny or Audit resources without Encryption with a customer-managed key (CMK) (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encryption-cmk) n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a true 6 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn SQL False False n/a n/a n/a false 0 n/a true 1 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn Azure Data Explorer False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Network False False n/a n/a Modify false 0 n/a false 0 n/a 'Network Contributor' (4d97b98b-1d4f-4787-a291-c67834d212e7)
BuiltIn Network False False n/a n/a AuditIfNotExists false 0 n/a true 2 [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6) n/a
BuiltIn VM Image Builder False False n/a n/a Audit false 0 n/a true 8 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Network False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 14 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 21 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Security Center False False n/a n/a AuditIfNotExists false 0 n/a true 19 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 5 [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a) n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 16 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn SQL False False n/a n/a AuditIfNotExists false 0 n/a true 16 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Synapse False False n/a n/a AuditIfNotExists false 0 n/a true 5 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Network False False n/a n/a Audit false 0 n/a true 10 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Network False False n/a n/a Audit false 0 n/a true 3 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a) n/a
BuiltIn Network False False n/a n/a Audit false 0 n/a true 3 [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a) n/a
BuiltIn App Service False False n/a n/a Audit false 0 n/a true 22 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); CIS Microsoft Azure Foundations Benchmark v1.1.0 (/providers/microsoft.authorization/policysetdefinitions/1a5bb27d-173f-493e-9568-eb56638dde4d); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); PCI v3.2.1:2018 (/providers/microsoft.authorization/policysetdefinitions/496eeda9-8f2f-4d5e-8dfd-204f0a92ed41); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); CIS Microsoft Azure Foundations Benchmark v1.3.0 (/providers/microsoft.authorization/policysetdefinitions/612b5213-9160-4969-8578-1518bd2a000c); ISO 27001:2013 (/providers/microsoft.authorization/policysetdefinitions/89c6cddc-1c73-4ac1-b19c-54d1a15a42f2); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); [Preview]: RMIT Malaysia (/providers/microsoft.authorization/policysetdefinitions/97a6d4f1-3bed-4cf4-ac5b-0e444c0408d6); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
Custom App Service False False Mg alz (Azure Landing Zones) Deny false 0 n/a true 1 Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit) n/a
BuiltIn App Service False False n/a n/a Audit false 0 n/a false 0 n/a n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 7 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 1 Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 1 [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 1 [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 3 [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 1 [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 3 [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 2 HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 1 [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 1 [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 2 [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 3 [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 5 [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 4 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); [Deprecated]: Azure Security Benchmark v1 (/providers/microsoft.authorization/policysetdefinitions/42a694ed-f65e-42b2-aa9e-8052e9740a92); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 3 [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 1 [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 1 [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 2 [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 3 HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 3 [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 1 [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 2 HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 2 HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 1 [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 1 [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 2 CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 2 CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 1 [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 4 [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 1 [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 3 [Preview]: Motion Picture Association of America (MPAA) (/providers/microsoft.authorization/policysetdefinitions/92646f03-e39d-47a9-9e24-58d60ef49af8); HITRUST/HIPAA (/providers/microsoft.authorization/policysetdefinitions/a169a624-5599-4385-a696-c8d643089fab); [Preview]: Windows machines should meet requirements for the Azure compute security baseline (/providers/microsoft.authorization/policysetdefinitions/be7a78aa-3e10-4153-a5fd-8c6506dbc821) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 6 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Monitoring False False n/a n/a AuditIfNotExists false 0 n/a false 0 n/a n/a
BuiltIn Guest Configuration False False n/a n/a AuditIfNotExists false 0 n/a true 15 NIST SP 800-171 Rev. 2 (/providers/microsoft.authorization/policysetdefinitions/03055927-78bd-4236-86c0-f36125a10dc9); IRS1075 September 2016 (/providers/microsoft.authorization/policysetdefinitions/105e0327-6175-4eb2-9af4-1fba43bdb39d); NIST SP 800-53 Rev. 5 (/providers/microsoft.authorization/policysetdefinitions/179d1daa-458f-4e47-8086-2a68d0d6c38f); Azure Security Benchmark (/providers/microsoft.authorization/policysetdefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8); [Preview]: Australian Government ISM PROTECTED (/providers/microsoft.authorization/policysetdefinitions/27272c0b-c225-4cc3-b8b0-f2534b093077); UK OFFICIAL and UK NHS (/providers/microsoft.authorization/policysetdefinitions/3937f550-eedd-4639-9c5e-294358be442e); [Preview]: SWIFT CSP-CSCF v2020 (/providers/microsoft.authorization/policysetdefinitions/3e0c67fc-8c7c-406c-89bd-6b6bdc986a22); Canada Federal PBMM (/providers/microsoft.authorization/policysetdefinitions/4c4a5f27-de81-430b-b4e5-9cbd50595a87); [Deprecated]: DoD Impact Level 4 (/providers/microsoft.authorization/policysetdefinitions/8d792a84-723c-4d92-a3c3-e4ed16a2d133); CMMC Level 3 (/providers/microsoft.authorization/policysetdefinitions/b5629c75-5c77-4422-87b9-2509e680f8de); [Deprecated]: Azure Security Benchmark v2 (/providers/microsoft.authorization/policysetdefinitions/bb522ac1-bc39-4957-b194-429bcd3bcb0b); NIST SP 800-53 Rev. 4 (/providers/microsoft.authorization/policysetdefinitions/cf25b9c1-bd23-4eb6-bd2c-f4f3ac644a5f); New Zealand ISM Restricted (/providers/microsoft.authorization/policysetdefinitions/d1a462af-7e6d-4901-98ac-61570b4ed22a); FedRAMP High (/providers/microsoft.authorization/policysetdefinitions/d5264498-16f4-418a-b659-fa7ef418175f); FedRAMP Moderate (/providers/microsoft.authorization/policysetdefinitions/e95f5a9f-57ad-4d03-bb0b-b1d16db93693) n/a
BuiltIn Monitoring False False n/a n/a audit false 0 n/a false 0 n/a n/a
JSON PolicySet Type Category Deprecated Preview Scope Mg/Sub Scope Name/Id hasAssignments Assignments Count Assignments
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Guest Configuration True False n/a n/a false 0 n/a
BuiltIn Regulatory Compliance True False n/a n/a false 0 n/a
BuiltIn Regulatory Compliance True False n/a n/a false 0 n/a
BuiltIn Regulatory Compliance True False n/a n/a false 0 n/a
BuiltIn Regulatory Compliance False True n/a n/a false 0 n/a
BuiltIn Monitoring False True n/a n/a false 0 n/a
BuiltIn Monitoring False True n/a n/a false 0 n/a
BuiltIn Trusted Launch False True n/a n/a false 0 n/a
BuiltIn Security Center False True n/a n/a false 0 n/a
BuiltIn Regulatory Compliance False True n/a n/a false 0 n/a
BuiltIn Regulatory Compliance False True n/a n/a false 0 n/a
BuiltIn Regulatory Compliance False True n/a n/a false 0 n/a
BuiltIn Guest Configuration False True n/a n/a false 0 n/a
BuiltIn Guest Configuration False False n/a n/a false 0 n/a
BuiltIn Security Center False False n/a n/a false 0 n/a
BuiltIn Regulatory Compliance False False n/a n/a false 0 n/a
BuiltIn Regulatory Compliance False False n/a n/a false 0 n/a
BuiltIn Regulatory Compliance False False n/a n/a false 0 n/a
BuiltIn Regulatory Compliance False False n/a n/a false 0 n/a
BuiltIn Security Center False False n/a n/a false 0 n/a
BuiltIn Security Center False False n/a n/a false 0 n/a
Custom Network False False Mg alz (Azure Landing Zones) false 0 n/a
BuiltIn Monitoring False False n/a n/a false 0 n/a
BuiltIn Monitoring False False n/a n/a false 0 n/a
Custom Encryption False False Mg alz (Azure Landing Zones) false 0 n/a
Custom Encryption False False Mg alz (Azure Landing Zones) false 0 n/a
Custom Monitoring False False Mg alz (Azure Landing Zones) false 0 n/a
Custom Security Center False False Mg alz (Azure Landing Zones) false 0 n/a
BuiltIn Guest Configuration False False n/a n/a false 0 n/a
Custom SQL False False Mg alz (Azure Landing Zones) false 0 n/a
BuiltIn Cosmos DB False False n/a n/a false 0 n/a
BuiltIn Monitoring False False n/a n/a false 0 n/a
BuiltIn Monitoring False False n/a n/a false 0 n/a
BuiltIn Regulatory Compliance False False n/a n/a false 0 n/a
BuiltIn Regulatory Compliance False False n/a n/a false 0 n/a
BuiltIn Network False False n/a n/a false 0 n/a
BuiltIn Regulatory Compliance False False n/a n/a false 0 n/a
BuiltIn Regulatory Compliance False False n/a n/a false 0 n/a
BuiltIn Regulatory Compliance False False n/a n/a false 0 n/a
BuiltIn Kubernetes False False n/a n/a false 0 n/a
BuiltIn Kubernetes False False n/a n/a false 0 n/a
BuiltIn Regulatory Compliance False False n/a n/a false 0 n/a
BuiltIn Regulatory Compliance False False n/a n/a false 0 n/a
BuiltIn Regulatory Compliance False False n/a n/a false 0 n/a
BuiltIn Regulatory Compliance False False n/a n/a false 0 n/a
BuiltIn Regulatory Compliance False False n/a n/a false 0 n/a
Custom False False Mg alz (Azure Landing Zones) false 0 n/a
BuiltIn Regulatory Compliance False False n/a n/a false 0 n/a
JSON Role Type Data canDoRoleAssignments hasAssignments Assignments Count Assignments
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Custom false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False true 6 /providers/microsoft.authorization/roleassignments/1810e41e-df60-4178-8c74-6ea2fec00a8a; /providers/microsoft.authorization/roleassignments/51a31262-cc3f-4cfd-948e-0fd0239807b1; /providers/microsoft.authorization/roleassignments/76765ae0-5721-47e6-88c1-c31983d77068; /providers/microsoft.authorization/roleassignments/78c99b5c-f9ff-47e7-8b19-261a31981dc1; /providers/microsoft.authorization/roleassignments/890aafc2-324a-4f6a-a40a-3fb501e8a0de; /providers/microsoft.authorization/roleassignments/9ce51771-571b-4aba-8a8b-1a869ff15a27
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Custom false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false True true 15 /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e; /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d; /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153; /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7; /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d; /providers/microsoft.management/managementgroups/alz-decommissioned/providers/microsoft.authorization/roleassignments/a2474fb8-5d7f-4d9a-9646-363d798b25f7; /providers/microsoft.management/managementgroups/alz-landingzones-corp/providers/microsoft.authorization/roleassignments/b706c72d-88d9-449b-9814-bb832b53e7f0; /providers/microsoft.management/managementgroups/alz-landingzones-online/providers/microsoft.authorization/roleassignments/dd120953-11ae-4f10-8856-49e430d1111d; /providers/microsoft.management/managementgroups/alz-landingzones/providers/microsoft.authorization/roleassignments/c7c07346-d6d5-41a0-b253-dfcc55072f48; /providers/microsoft.management/managementgroups/alz-platform-connectivity/providers/microsoft.authorization/roleassignments/80962acc-cc5c-4eaa-b2bd-f5c567c22766; /providers/microsoft.management/managementgroups/alz-platform-identity/providers/microsoft.authorization/roleassignments/72412164-1650-4110-aaf1-708631c37efb; /providers/microsoft.management/managementgroups/alz-platform-management/providers/microsoft.authorization/roleassignments/cfa9db8a-5ab9-474d-8daf-6a484895b1b3; /providers/microsoft.management/managementgroups/alz-platform/providers/microsoft.authorization/roleassignments/64677d6a-3574-4abd-a351-5ad5dc1da7c7; /providers/microsoft.management/managementgroups/alz-sandbox/providers/microsoft.authorization/roleassignments/08749dc1-4bc8-4d50-aa00-0aa45e8bd443; /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin false False true 1 /providers/microsoft.authorization/roleassignments/49df53fb-9a72-41c7-9e29-8e9a9d08e934
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Custom false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Custom false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false True true 2 /providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706; /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin true False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a
Builtin false False false 0 n/a

ScopeInsights

Highlight Management Group in HierarchyMap

Management Group Name: Azure Landing Zones

Management Group Id: alz

Management Group Path: 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz

9 ManagementGroups below this scope

0 Subscriptions below this scope

Microsoft Defender for Cloud Secure Score: n/a Video , Blog , docs

No Management Group Diagnostic settings docs

No Consumption data available as switch parameter -DoAzureConsumption was not applied

0 ResourceTypes (all Subscriptions below this scope)

0 ResourceTypes (1st party) Diagnostics capable (all Subscriptions below this scope)

0 Policy assignments

0 PolicySet assignments

Policy Assignment Limit: 0/200

   Download CSV semicolon | comma
Policy DisplayName PolicyId Category Policy effect Role definitions Unique assignments Used in PolicySets
API App should only be accessible over HTTPS /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-appserviceapiapp-http App Service Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit))
Application Gateway should be deployed with WAF enabled /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-appgw-without-waf Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0
AppService append enable https only setting to enforce https setting. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-appservice-httpsonly App Service Default: Append; Allowed: Append,Disabled n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit))
AppService append sites with minimum TLS version to enforce. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-appservice-latesttls App Service Default: Append; Allowed: Append,Disabled n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit))
Azure Cache for Redis Append a specific min TLS version requirement and enforce TLS. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-redis-sslenforcement Cache Default: Append; Allowed: Append,Disabled n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit))
Azure Cache for Redis Append and the enforcement that enableNonSslPort is disabled. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-redis-disablenonsslport Cache Default: Append; Allowed: Append,Disabled,Modify n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit))
Azure Cache for Redis only secure connections should be enabled /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-redis-http Cache Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit))
Azure Database for MySQL server deploy a specific min TLS version and enforce SSL. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-mysql-sslenforcement SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Owner 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit))
Azure Database for PostgreSQL server deploy a specific min TLS version requirement and enforce SSL /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-postgresql-sslenforcement SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Owner 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit))
Azure Machine Learning should have disabled public network access /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-publicnetworkaccess Machine Learning Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0
Azure SQL Database should have the minimal TLS version set to the highest version /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-sql-mintls SQL Default: Audit; Allowed: Audit,Disabled,Deny n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit))
Azure Storage deploy a specific min TLS version requirement and enforce SSL/HTTPS /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-storage-sslenforcement Storage Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Owner 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit))
Control private endpoint connections to Azure Machine Learning /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/audit-machinelearning-privateendpointid Machine Learning Default: Audit; Allowed: Audit,Deny,Disabled n/a 0 0
Deny AKS cluster creation in Azure Machine Learning /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-aks Machine Learning Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0
Deny Databricks workspaces without Vnet injection /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-databricks-virtualnetwork Databricks Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0
Deny non-premium Databricks sku /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-databricks-sku Databricks Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0
Deny public acces behind vnet to Azure Machine Learning workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-publicaccesswhenbehindvnet Machine Learning Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0
Deny public access of Azure Machine Learning clusters via SSH /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-computecluster-remoteloginportpublicaccess Machine Learning Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0
Deny public IPs for Databricks cluster /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-databricks-nopublicip Databricks Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0
Deny the creation of private DNS /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-private-dns-zones Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0
Deny the creation of public IP /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-publicip Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0
Deny vNet peering /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-vnet-peering Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0
Deny vNet peering cross subscription. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-vnet-peer-cross-sub Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0
Deploy a default budget on all subscriptions under the assigned scope /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-budget Budget Default: DeployIfNotExists; Allowed: DeployIfNotExists,AuditIfNotExists,Disabled Contributor 0 0
Deploy a route table with specific user defined routes /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-custom-route-table Network Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Network Contributor 0 0
Deploy an Azure DDoS Protection Standard plan /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-ddosprotection Network Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Network Contributor 0 0
Deploy Azure Firewall Manager policy in the subscription /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-firewallpolicy Network Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Contributor 0 0
Deploy Azure Security Center Security Contacts /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-asc-securitycontacts Security Center Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Security Admin 0 1 (Deploy Microsoft Defender for Cloud configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-mdfc-config))
Deploy Diagnostic Settings for Analysis Services to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-analysisservice Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for API Management to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-apimgmt Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for App Service Plan to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-webserverfarm Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for App Service to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-website Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Application Gateway to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-applicationgateway Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Automation to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-aa Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Azure API for FHIR to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-apiforfhir Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Azure Data Explorer Cluster to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-dataexplorercluster Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Azure Function App to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-function Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Azure Media Service to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mediaservice Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for CDN Endpoint to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-cdnendpoints Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Cognitive Services to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-cognitiveservices Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Container Instances to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-aci Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Container Registry to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-acr Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Cosmos DB to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-cosmosdb Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Data Factory to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-datafactory Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Data Lake Analytics to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-dlanalytics Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Database for MySQL to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mysql Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Database for PostgreSQL to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-postgresql Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Databricks to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-databricks Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Event Grid subscriptions to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-eventgridsub Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Event Grid System Topic to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-eventgridsystemtopic Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Event Grid Topic to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-eventgridtopic Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for ExpressRoute to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-expressroute Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Firewall to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-firewall Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Front Door to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-frontdoor Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for HDInsight to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-hdinsight Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for IoT Hub to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-iothub Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Load Balancer to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-loadbalancer Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Logic Apps integration service environment to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-logicappsise Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Machine Learning workspace to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mlworkspace Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for MariaDB to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mariadb Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Network Interfaces to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-nic Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Network Security Groups to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-networksecuritygroups Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Power BI Embedded to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-powerbiembedded Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Redis Cache to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-rediscache Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Relay to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-relay Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for SignalR to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-signalr Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for SQL Elastic Pools to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-sqlelasticpools Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for SQL Managed Instances to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-sqlmi Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Time Series Insights to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-timeseriesinsights Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Traffic Manager to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-trafficmanager Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Virtual Machine Scale Sets to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-vmss Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Virtual Machines to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-vm Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for Virtual Network to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-virtualnetwork Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for VPN Gateway to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-vnetgw Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for WVD Application group to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-wvdappgroup Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for WVD Host Pools to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-wvdhostpools Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy Diagnostic Settings for WVD Workspace to Log Analytics workspace /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-wvdworkspace Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 1 (Deploy Diagnostic Settings to Azure Services (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics))
Deploy SQL database auditing settings /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-auditingsettings SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled SQL Security Manager 0 1 (Deploy SQL Database built-in SQL security configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-sql-security))
Deploy SQL Database security Alert Policies configuration with email admin accounts /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-securityalertpolicies SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled SQL Security Manager 0 1 (Deploy SQL Database built-in SQL security configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-sql-security))
Deploy SQL Database Transparent Data Encryption /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-tde SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled SQL Security Manager 0 1 (Deploy SQL Database built-in SQL security configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-sql-security))
Deploy SQL Database vulnerability Assessments /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-vulnerabilityassessments SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled SQL Security Manager; Monitoring Contributor 0 1 (Deploy SQL Database built-in SQL security configuration (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-sql-security))
Deploy Virtual Network with peering to the hub /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-vnet-hubspoke Network Fixed: deployIfNotExists Contributor 0 0
Deploy Windows Domain Join Extension with keyvault configuration /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-windows-domainjoin Guest Configuration Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Virtual Machine Contributor 0 0
Deploys NSG flow logs and traffic analytics /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-nsg-flowlogs Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Monitoring Contributor; Log Analytics Contributor 0 0
Deploys NSG flow logs and traffic analytics to Log Analytics /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-nsg-flowlogs-to-la Monitoring Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Storage Account Contributor; Network Contributor; Storage Account Key Operator Service Role; Log Analytics Contributor; Contributor 0 0
Enforce scale settings for Azure Machine Learning compute clusters /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-computecluster-scale Budget Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0
Enforce subnet connectivity for Azure Machine Learning compute clusters and compute instances /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-compute-subnetid Machine Learning Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0
Enforces high business impact Azure Machine Learning Workspaces /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-hbiworkspace Machine Learning Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0
Function App should only be accessible over HTTPS /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-appservicefunctionapp-http App Service Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit))
KeyVault SoftDelete should be enabled /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-kv-softdelete Key Vault Fixed: append n/a 0 0
Limit allowed vm sizes for Azure Machine Learning compute clusters and compute instances /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-machinelearning-compute-vmsize Budget Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 0
MySQL database servers enforce SSL connections. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-mysql-http SQL Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit))
No child resources in Automation Account /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-aa-child-resources Automation Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0
PostgreSQL database servers enforce SSL connection. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-postgresql-http SQL Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit))
Public network access should be disabled for MariaDB /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-publicendpoint-mariadb SQL Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0
RDP access from the Internet should be blocked /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-rdp-from-internet Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0
SQL Managed Instance should have the minimal TLS version set to the highest version /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-sqlmi-mintls SQL Default: Audit; Allowed: Audit,Disabled,Deny n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit))
SQL managed instances deploy a specific min TLS version requirement. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sqlmi-mintls SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Owner 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit))
SQL servers deploys a specific min TLS version requirement. /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-mintls SQL Default: DeployIfNotExists; Allowed: DeployIfNotExists,Disabled Owner 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit))
Storage Account set to minumum TLS and Secure transfer should be enabled /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-storage-mintls Storage Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit))
Subnets should have a Network Security Group /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-subnet-without-nsg Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0
Subnets should have a User Defined Route /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-subnet-without-udr Network Default: Deny; Allowed: Audit,Deny,Disabled n/a 0 0
Web Application should only be accessible over HTTPS /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-appservicewebapp-http App Service Default: Deny; Allowed: Audit,Disabled,Deny n/a 0 1 (Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit))
   Download CSV semicolon | comma
PolicySet DisplayName PolicySetId Category Unique assignments Policies Used
Configure Azure PaaS services to use private DNS zones /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-private-dns-zones Network 0 20 (<a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/06695360-db88-47f6-b976-7500d4297475.html" target="_blank" rel="noopener">Configure Azure File Sync to use private DNS zones</a> (/providers/microsoft.authorization/policydefinitions/06695360-db88-47f6-b976-7500d4297475); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/0b026355-49cb-467b-8ac4-f777874e175a.html" target="_blank" rel="noopener">Configure Azure Web PubSub Service to use private DNS zones</a> (/providers/microsoft.authorization/policydefinitions/0b026355-49cb-467b-8ac4-f777874e175a); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/4ec38ebc-381f-45ee-81a4-acbc4be878f8.html" target="_blank" rel="noopener">Deploy - Configure private DNS zones for private endpoints that connect to Batch accounts</a> (/providers/microsoft.authorization/policydefinitions/4ec38ebc-381f-45ee-81a4-acbc4be878f8); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/7a860e27-9ca2-4fc6-822d-c2d248c300df.html" target="_blank" rel="noopener">Configure private DNS zones for private endpoints connected to App Configuration</a> (/providers/microsoft.authorization/policydefinitions/7a860e27-9ca2-4fc6-822d-c2d248c300df); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/942bd215-1a66-44be-af65-6a1c0318dbe2.html" target="_blank" rel="noopener">[Preview]: Configure Azure Recovery Services vaults to use private DNS zones</a> (/providers/microsoft.authorization/policydefinitions/942bd215-1a66-44be-af65-6a1c0318dbe2); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/aaa64d2d-2fa3-45e5-b332-0b031b9b30e8.html" target="_blank" rel="noopener">Configure IoT Hub device provisioning instances to use private DNS zones</a> (/providers/microsoft.authorization/policydefinitions/aaa64d2d-2fa3-45e5-b332-0b031b9b30e8); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/ac673a9a-f77d-4846-b2d8-a57f8e1c01d4.html" target="_blank" rel="noopener">[Preview]: Configure Azure Key Vaults to use private DNS zones</a> (/providers/microsoft.authorization/policydefinitions/ac673a9a-f77d-4846-b2d8-a57f8e1c01d4); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/b0e86710-7fb7-4a6c-a064-32e9b829509e.html" target="_blank" rel="noopener">Deploy - Configure private DNS zones for private endpoints connect to Azure SignalR Service</a> (/providers/microsoft.authorization/policydefinitions/b0e86710-7fb7-4a6c-a064-32e9b829509e); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/b318f84a-b872-429b-ac6d-a01b96814452.html" target="_blank" rel="noopener">Configure App Services to use private DNS zones</a> (/providers/microsoft.authorization/policydefinitions/b318f84a-b872-429b-ac6d-a01b96814452); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/baf19753-7502-405f-8745-370519b20483.html" target="_blank" rel="noopener">Deploy - Configure Azure Event Grid topics to use private DNS zones</a> (/providers/microsoft.authorization/policydefinitions/baf19753-7502-405f-8745-370519b20483); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/bc05b96c-0b36-4ca9-82f0-5c53f96ce05a.html" target="_blank" rel="noopener">Configure disk access resources to use private DNS zones</a> (/providers/microsoft.authorization/policydefinitions/bc05b96c-0b36-4ca9-82f0-5c53f96ce05a); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/c4bc6f10-cb41-49eb-b000-d5ab82e2a091.html" target="_blank" rel="noopener">Configure Cognitive Services accounts to use private DNS zones</a> (/providers/microsoft.authorization/policydefinitions/c4bc6f10-cb41-49eb-b000-d5ab82e2a091); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/c99ce9c1-ced7-4c3e-aca0-10e69ce0cb02.html" target="_blank" rel="noopener">Deploy - Configure Azure IoT Hubs to use private DNS zones</a> (/providers/microsoft.authorization/policydefinitions/c99ce9c1-ced7-4c3e-aca0-10e69ce0cb02); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/d389df0a-e0d7-4607-833c-75a6fdac2c2d.html" target="_blank" rel="noopener">Deploy - Configure Azure Event Grid domains to use private DNS zones</a> (/providers/microsoft.authorization/policydefinitions/d389df0a-e0d7-4607-833c-75a6fdac2c2d); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/e016b22b-e0eb-436d-8fd7-160c4eaed6e2.html" target="_blank" rel="noopener">Configure Azure Cache for Redis to use private DNS zones</a> (/providers/microsoft.authorization/policydefinitions/e016b22b-e0eb-436d-8fd7-160c4eaed6e2); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/e9585a95-5b8c-4d03-b193-dc7eb5ac4c32.html" target="_blank" rel="noopener">Configure Container registries to use private DNS zones</a> (/providers/microsoft.authorization/policydefinitions/e9585a95-5b8c-4d03-b193-dc7eb5ac4c32); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/ed66d4f5-8220-45dc-ab4a-20d1749c74e6.html" target="_blank" rel="noopener">Configure Event Hub namespaces to use private DNS zones</a> (/providers/microsoft.authorization/policydefinitions/ed66d4f5-8220-45dc-ab4a-20d1749c74e6); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/ee40564d-486e-4f68-a5ca-7a621edae0fb.html" target="_blank" rel="noopener">Configure Azure Machine Learning workspace to use private DNS zones</a> (/providers/microsoft.authorization/policydefinitions/ee40564d-486e-4f68-a5ca-7a621edae0fb); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/f0fcf93c-c063-4071-9668-c47474bd3564.html" target="_blank" rel="noopener">Configure Service Bus namespaces to use private DNS zones</a> (/providers/microsoft.authorization/policydefinitions/f0fcf93c-c063-4071-9668-c47474bd3564); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/fbc14a67-53e4-4932-abcc-2049c6706009.html" target="_blank" rel="noopener">Configure Azure Cognitive Search services to use private DNS zones</a> (/providers/microsoft.authorization/policydefinitions/fbc14a67-53e4-4932-abcc-2049c6706009))
Deny or Audit resources without Encryption with a customer-managed key (CMK) /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encryption-cmk Encryption 0 15 (<a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/051cba44-2429-45b9-9649-46cec11c7119.html" target="_blank" rel="noopener">Azure API for FHIR should use a customer-managed key to encrypt data at rest</a> (/providers/microsoft.authorization/policydefinitions/051cba44-2429-45b9-9649-46cec11c7119); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/0961003e-5a0a-4549-abde-af6a37f2724d.html" target="_blank" rel="noopener">Virtual machines should encrypt temp disks, caches, and data flows between Compute and Storage resources</a> (/providers/microsoft.authorization/policydefinitions/0961003e-5a0a-4549-abde-af6a37f2724d); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/0d134df8-db83-46fb-ad72-fe0c9428c8dd.html" target="_blank" rel="noopener">[Deprecated]: SQL servers should use customer-managed keys to encrypt data at rest</a> (/providers/microsoft.authorization/policydefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/18adea5e-f416-4d0f-8aa8-d24321e3e274.html" target="_blank" rel="noopener">PostgreSQL servers should use customer-managed keys to encrypt data at rest</a> (/providers/microsoft.authorization/policydefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/1f905d99-2ab7-462c-a6b0-f709acca6c8f.html" target="_blank" rel="noopener">Azure Cosmos DB accounts should use customer-managed keys to encrypt data at rest</a> (/providers/microsoft.authorization/policydefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580.html" target="_blank" rel="noopener">Container registries should be encrypted with a customer-managed key</a> (/providers/microsoft.authorization/policydefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/67121cc7-ff39-4ab8-b7e3-95b84dab487d.html" target="_blank" rel="noopener">Cognitive Services accounts should enable data encryption with a customer-managed key</a> (/providers/microsoft.authorization/policydefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/6fac406b-40ca-413b-bf8e-0bf964659c25.html" target="_blank" rel="noopener">Storage accounts should use customer-managed key for encryption</a> (/providers/microsoft.authorization/policydefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/7d7be79c-23ba-4033-84dd-45e2a5ccdd67.html" target="_blank" rel="noopener">Both operating systems and data disks in Azure Kubernetes Service clusters should be encrypted by customer-managed keys</a> (/providers/microsoft.authorization/policydefinitions/7d7be79c-23ba-4033-84dd-45e2a5ccdd67); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/83cef61d-dbd1-4b20-a4fc-5fbc7da10833.html" target="_blank" rel="noopener">MySQL servers should use customer-managed keys to encrypt data at rest</a> (/providers/microsoft.authorization/policydefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/86efb160-8de7-451d-bc08-5d475b0aadae.html" target="_blank" rel="noopener">Azure Data Box jobs should use a customer-managed key to encrypt the device unlock password</a> (/providers/microsoft.authorization/policydefinitions/86efb160-8de7-451d-bc08-5d475b0aadae); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/87ba29ef-1ab3-4d82-b763-87fcd4f531f7.html" target="_blank" rel="noopener">Azure Stream Analytics jobs should use customer-managed keys to encrypt data</a> (/providers/microsoft.authorization/policydefinitions/87ba29ef-1ab3-4d82-b763-87fcd4f531f7); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/99e9ccd8-3db9-4592-b0d1-14b1715a4d8a.html" target="_blank" rel="noopener">Azure Batch account should use customer-managed keys to encrypt data</a> (/providers/microsoft.authorization/policydefinitions/99e9ccd8-3db9-4592-b0d1-14b1715a4d8a); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/ba769a63-b8cc-4b2d-abf6-ac33c7204be8.html" target="_blank" rel="noopener">Azure Machine Learning workspaces should be encrypted with a customer-managed key</a> (/providers/microsoft.authorization/policydefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/f7d52b2d-e161-4dfa-a82b-55e564167385.html" target="_blank" rel="noopener">Azure Synapse workspaces should use customer-managed keys to encrypt data at rest</a> (/providers/microsoft.authorization/policydefinitions/f7d52b2d-e161-4dfa-a82b-55e564167385))
Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/enforce-encrypttransit Encryption 0 22 (<a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d.html" target="_blank" rel="noopener">Kubernetes clusters should be accessible only over HTTPS</a> (/providers/microsoft.authorization/policydefinitions/1a5b4dca-0b6f-4cf5-907c-56316bc1bf3d); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e.html" target="_blank" rel="noopener">Latest TLS version should be used in your API App</a> (/providers/microsoft.authorization/policydefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b.html" target="_blank" rel="noopener">Latest TLS version should be used in your Web App</a> (/providers/microsoft.authorization/policydefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/f9d614c5-c173-4d56-95a7-b4437057d193.html" target="_blank" rel="noopener">Latest TLS version should be used in your Function App</a> (/providers/microsoft.authorization/policydefinitions/f9d614c5-c173-4d56-95a7-b4437057d193); <b>API App should only be accessible over HTTPS</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-appserviceapiapp-http); <b>AppService append enable https only setting to enforce https setting.</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-appservice-httpsonly); <b>AppService append sites with minimum TLS version to enforce.</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-appservice-latesttls); <b>Azure Cache for Redis Append a specific min TLS version requirement and enforce TLS.</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-redis-sslenforcement); <b>Azure Cache for Redis Append and the enforcement that enableNonSslPort is disabled.</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/append-redis-disablenonsslport); <b>Azure Cache for Redis only secure connections should be enabled</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-redis-http); <b>Azure Database for MySQL server deploy a specific min TLS version and enforce SSL.</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-mysql-sslenforcement); <b>Azure Database for PostgreSQL server deploy a specific min TLS version requirement and enforce SSL </b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-postgresql-sslenforcement); <b>Azure SQL Database should have the minimal TLS version set to the highest version</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-sql-mintls); <b>Azure Storage deploy a specific min TLS version requirement and enforce SSL/HTTPS </b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-storage-sslenforcement); <b>Function App should only be accessible over HTTPS</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-appservicefunctionapp-http); <b>MySQL database servers enforce SSL connections.</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-mysql-http); <b>PostgreSQL database servers enforce SSL connection.</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-postgresql-http); <b>SQL Managed Instance should have the minimal TLS version set to the highest version</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-sqlmi-mintls); <b>SQL managed instances deploy a specific min TLS version requirement.</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sqlmi-mintls); <b>SQL servers deploys a specific min TLS version requirement.</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-mintls); <b>Storage Account set to minumum TLS and Secure transfer should be enabled</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-storage-mintls); <b>Web Application should only be accessible over HTTPS</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deny-appservicewebapp-http))
Deploy Diagnostic Settings to Azure Services /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-diagnostics-loganalytics Monitoring 0 62 (<a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/04d53d87-841c-4f23-8a5b-21564380b55e.html" target="_blank" rel="noopener">Deploy Diagnostic Settings for Service Bus to Log Analytics workspace</a> (/providers/microsoft.authorization/policydefinitions/04d53d87-841c-4f23-8a5b-21564380b55e); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/08ba64b8-738f-4918-9686-730d2ed79c7d.html" target="_blank" rel="noopener">Deploy Diagnostic Settings for Search Services to Log Analytics workspace</a> (/providers/microsoft.authorization/policydefinitions/08ba64b8-738f-4918-9686-730d2ed79c7d); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/1f6e93e8-6b31-41b1-83f6-36e449a42579.html" target="_blank" rel="noopener">Deploy Diagnostic Settings for Event Hub to Log Analytics workspace</a> (/providers/microsoft.authorization/policydefinitions/1f6e93e8-6b31-41b1-83f6-36e449a42579); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/237e0f7e-b0e8-4ec4-ad46-8c12cb66d673.html" target="_blank" rel="noopener">Deploy Diagnostic Settings for Stream Analytics to Log Analytics workspace</a> (/providers/microsoft.authorization/policydefinitions/237e0f7e-b0e8-4ec4-ad46-8c12cb66d673); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/6c66c325-74c8-42fd-a286-a74b0e2939d8.html" target="_blank" rel="noopener">Deploy - Configure diagnostic settings for Azure Kubernetes Service to Log Analytics workspace</a> (/providers/microsoft.authorization/policydefinitions/6c66c325-74c8-42fd-a286-a74b0e2939d8); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/6f8f98a4-f108-47cb-8e98-91a0d85cd474.html" target="_blank" rel="noopener">Configure diagnostic settings for storage accounts to Log Analytics workspace</a> (/providers/microsoft.authorization/policydefinitions/6f8f98a4-f108-47cb-8e98-91a0d85cd474); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/752154a7-1e0f-45c6-a880-ac75a7e4f648.html" target="_blank" rel="noopener">Public IP addresses should have resource logs enabled for Azure DDoS Protection Standard</a> (/providers/microsoft.authorization/policydefinitions/752154a7-1e0f-45c6-a880-ac75a7e4f648); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/b79fa14e-238a-4c2d-b376-442ce508fc84.html" target="_blank" rel="noopener">Deploy - Configure diagnostic settings for SQL Databases to Log Analytics workspace</a> (/providers/microsoft.authorization/policydefinitions/b79fa14e-238a-4c2d-b376-442ce508fc84); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/b889a06c-ec72-4b03-910a-cb169ee18721.html" target="_blank" rel="noopener">Deploy Diagnostic Settings for Logic Apps to Log Analytics workspace</a> (/providers/microsoft.authorization/policydefinitions/b889a06c-ec72-4b03-910a-cb169ee18721); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/bef3f64c-5290-43b7-85b0-9b254eef4c47.html" target="_blank" rel="noopener">Deploy Diagnostic Settings for Key Vault to Log Analytics workspace</a> (/providers/microsoft.authorization/policydefinitions/bef3f64c-5290-43b7-85b0-9b254eef4c47); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/c717fb0c-d118-4c43-ab3d-ece30ac81fb3.html" target="_blank" rel="noopener">Deploy Diagnostic Settings for Recovery Services Vault to Log Analytics workspace for resource specific categories.</a> (/providers/microsoft.authorization/policydefinitions/c717fb0c-d118-4c43-ab3d-ece30ac81fb3); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/c84e5349-db6d-4769-805e-e14037dab9b5.html" target="_blank" rel="noopener">Deploy Diagnostic Settings for Batch Account to Log Analytics workspace</a> (/providers/microsoft.authorization/policydefinitions/c84e5349-db6d-4769-805e-e14037dab9b5); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03.html" target="_blank" rel="noopener">Deploy Diagnostic Settings for Data Lake Analytics to Log Analytics workspace</a> (/providers/microsoft.authorization/policydefinitions/d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03); <b>Deploy Diagnostic Settings for Analysis Services to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-analysisservice); <b>Deploy Diagnostic Settings for API Management to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-apimgmt); <b>Deploy Diagnostic Settings for App Service Plan to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-webserverfarm); <b>Deploy Diagnostic Settings for App Service to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-website); <b>Deploy Diagnostic Settings for Application Gateway to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-applicationgateway); <b>Deploy Diagnostic Settings for Automation to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-aa); <b>Deploy Diagnostic Settings for Azure API for FHIR to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-apiforfhir); <b>Deploy Diagnostic Settings for Azure Data Explorer Cluster to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-dataexplorercluster); <b>Deploy Diagnostic Settings for Azure Function App to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-function); <b>Deploy Diagnostic Settings for Azure Media Service to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mediaservice); <b>Deploy Diagnostic Settings for CDN Endpoint to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-cdnendpoints); <b>Deploy Diagnostic Settings for Cognitive Services to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-cognitiveservices); <b>Deploy Diagnostic Settings for Container Instances to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-aci); <b>Deploy Diagnostic Settings for Container Registry to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-acr); <b>Deploy Diagnostic Settings for Cosmos DB to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-cosmosdb); <b>Deploy Diagnostic Settings for Data Factory to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-datafactory); <b>Deploy Diagnostic Settings for Data Lake Analytics to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-dlanalytics); <b>Deploy Diagnostic Settings for Database for MySQL to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mysql); <b>Deploy Diagnostic Settings for Database for PostgreSQL to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-postgresql); <b>Deploy Diagnostic Settings for Databricks to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-databricks); <b>Deploy Diagnostic Settings for Event Grid subscriptions to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-eventgridsub); <b>Deploy Diagnostic Settings for Event Grid System Topic to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-eventgridsystemtopic); <b>Deploy Diagnostic Settings for Event Grid Topic to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-eventgridtopic); <b>Deploy Diagnostic Settings for ExpressRoute to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-expressroute); <b>Deploy Diagnostic Settings for Firewall to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-firewall); <b>Deploy Diagnostic Settings for Front Door to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-frontdoor); <b>Deploy Diagnostic Settings for HDInsight to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-hdinsight); <b>Deploy Diagnostic Settings for IoT Hub to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-iothub); <b>Deploy Diagnostic Settings for Load Balancer to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-loadbalancer); <b>Deploy Diagnostic Settings for Logic Apps integration service environment to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-logicappsise); <b>Deploy Diagnostic Settings for Machine Learning workspace to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mlworkspace); <b>Deploy Diagnostic Settings for MariaDB to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-mariadb); <b>Deploy Diagnostic Settings for Network Interfaces to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-nic); <b>Deploy Diagnostic Settings for Network Security Groups to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-networksecuritygroups); <b>Deploy Diagnostic Settings for Power BI Embedded to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-powerbiembedded); <b>Deploy Diagnostic Settings for Redis Cache to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-rediscache); <b>Deploy Diagnostic Settings for Relay to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-relay); <b>Deploy Diagnostic Settings for SignalR to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-signalr); <b>Deploy Diagnostic Settings for SQL Elastic Pools to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-sqlelasticpools); <b>Deploy Diagnostic Settings for SQL Managed Instances to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-sqlmi); <b>Deploy Diagnostic Settings for Time Series Insights to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-timeseriesinsights); <b>Deploy Diagnostic Settings for Traffic Manager to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-trafficmanager); <b>Deploy Diagnostic Settings for Virtual Machine Scale Sets to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-vmss); <b>Deploy Diagnostic Settings for Virtual Machines to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-vm); <b>Deploy Diagnostic Settings for Virtual Network to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-virtualnetwork); <b>Deploy Diagnostic Settings for VPN Gateway to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-vnetgw); <b>Deploy Diagnostic Settings for WVD Application group to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-wvdappgroup); <b>Deploy Diagnostic Settings for WVD Host Pools to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-wvdhostpools); <b>Deploy Diagnostic Settings for WVD Workspace to Log Analytics workspace</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-diagnostics-wvdworkspace))
Deploy Microsoft Defender for Cloud configuration /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-mdfc-config Security Center 0 12 (<a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/1f725891-01c0-420a-9059-4fa46cb770b7.html" target="_blank" rel="noopener">Configure Azure Defender for Key Vaults to be enabled</a> (/providers/microsoft.authorization/policydefinitions/1f725891-01c0-420a-9059-4fa46cb770b7); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/2370a3c1-4a25-4283-a91a-c9c1a145fb2f.html" target="_blank" rel="noopener">Configure Azure Defender for DNS to be enabled</a> (/providers/microsoft.authorization/policydefinitions/2370a3c1-4a25-4283-a91a-c9c1a145fb2f); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/44433aa3-7ec2-4002-93ea-65c65ff0310a.html" target="_blank" rel="noopener">Configure Azure Defender for open-source relational databases to be enabled</a> (/providers/microsoft.authorization/policydefinitions/44433aa3-7ec2-4002-93ea-65c65ff0310a); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/50ea7265-7d8c-429e-9a7d-ca1f410191c3.html" target="_blank" rel="noopener">Configure Azure Defender for SQL servers on machines to be enabled</a> (/providers/microsoft.authorization/policydefinitions/50ea7265-7d8c-429e-9a7d-ca1f410191c3); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/74c30959-af11-47b3-9ed2-a26e03f427a3.html" target="_blank" rel="noopener">Configure Azure Defender for Storage to be enabled</a> (/providers/microsoft.authorization/policydefinitions/74c30959-af11-47b3-9ed2-a26e03f427a3); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/8e86a5b6-b9bd-49d1-8e21-4bb8a0862222.html" target="_blank" rel="noopener">Configure Azure Defender for servers to be enabled</a> (/providers/microsoft.authorization/policydefinitions/8e86a5b6-b9bd-49d1-8e21-4bb8a0862222); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/b40e7bcd-a1e5-47fe-b9cf-2f534d0bfb7d.html" target="_blank" rel="noopener">Configure Azure Defender for App Service to be enabled</a> (/providers/microsoft.authorization/policydefinitions/b40e7bcd-a1e5-47fe-b9cf-2f534d0bfb7d); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/b7021b2b-08fd-4dc0-9de7-3c6ece09faf9.html" target="_blank" rel="noopener">Configure Azure Defender for Resource Manager to be enabled</a> (/providers/microsoft.authorization/policydefinitions/b7021b2b-08fd-4dc0-9de7-3c6ece09faf9); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/b99b73e7-074b-4089-9395-b7236f094491.html" target="_blank" rel="noopener">Configure Azure Defender for Azure SQL database to be enabled</a> (/providers/microsoft.authorization/policydefinitions/b99b73e7-074b-4089-9395-b7236f094491); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/c9ddb292-b203-4738-aead-18e2716e858f.html" target="_blank" rel="noopener">Configure Microsoft Defender for Containers to be enabled</a> (/providers/microsoft.authorization/policydefinitions/c9ddb292-b203-4738-aead-18e2716e858f); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/ffb6f416-7bd2-4488-8828-56585fef2be9.html" target="_blank" rel="noopener">Deploy export to Log Analytics workspace for Azure Security Center data</a> (/providers/microsoft.authorization/policydefinitions/ffb6f416-7bd2-4488-8828-56585fef2be9); <b>Deploy Azure Security Center Security Contacts</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-asc-securitycontacts))
Deploy SQL Database built-in SQL security configuration /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deploy-sql-security SQL 0 4 (<b>Deploy SQL database auditing settings</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-auditingsettings); <b>Deploy SQL Database security Alert Policies configuration with email admin accounts</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-securityalertpolicies); <b>Deploy SQL Database Transparent Data Encryption </b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-tde); <b>Deploy SQL Database vulnerability Assessments</b> (/providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policydefinitions/deploy-sql-vulnerabilityassessments))
Public network access should be disabled for PaaS services /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/policysetdefinitions/deny-publicpaasendpoints 0 10 (<a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/040732e8-d947-40b8-95d6-854c95024bf8.html" target="_blank" rel="noopener">Azure Kubernetes Service Private Clusters should be enabled</a> (/providers/microsoft.authorization/policydefinitions/040732e8-d947-40b8-95d6-854c95024bf8); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/0fdf0491-d080-4575-b627-ad0e843cba0f.html" target="_blank" rel="noopener">Public network access should be disabled for Container registries</a> (/providers/microsoft.authorization/policydefinitions/0fdf0491-d080-4575-b627-ad0e843cba0f); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/1b8ca024-1d5c-4dec-8995-b1a932b41780.html" target="_blank" rel="noopener">Public network access on Azure SQL Database should be disabled</a> (/providers/microsoft.authorization/policydefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/21a8cd35-125e-4d13-b82d-2e19b7208bb7.html" target="_blank" rel="noopener">Public network access should be disabled for Azure File Sync</a> (/providers/microsoft.authorization/policydefinitions/21a8cd35-125e-4d13-b82d-2e19b7208bb7); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/34c877ad-507e-4c82-993e-3452a6e0ad3c.html" target="_blank" rel="noopener">Storage accounts should restrict network access</a> (/providers/microsoft.authorization/policydefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/55615ac9-af46-4a59-874e-391cc3dfb490.html" target="_blank" rel="noopener">[Preview]: Azure Key Vault should disable public network access</a> (/providers/microsoft.authorization/policydefinitions/55615ac9-af46-4a59-874e-391cc3dfb490); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/5e1de0e3-42cb-4ebc-a86d-61d0c619ca48.html" target="_blank" rel="noopener">Public network access should be disabled for PostgreSQL flexible servers</a> (/providers/microsoft.authorization/policydefinitions/5e1de0e3-42cb-4ebc-a86d-61d0c619ca48); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/74c5a0ae-5e48-4738-b093-65e23a060488.html" target="_blank" rel="noopener">Public network access should be disabled for Batch accounts</a> (/providers/microsoft.authorization/policydefinitions/74c5a0ae-5e48-4738-b093-65e23a060488); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/797b37f7-06b8-444c-b1ad-fc62867f335a.html" target="_blank" rel="noopener">Azure Cosmos DB should disable public network access</a> (/providers/microsoft.authorization/policydefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a); <a class="externallink" href="https://www.azadvertizer.net/azpolicyadvertizer/c9299215-ae47-4f50-9c54-8a392f68a052.html" target="_blank" rel="noopener">Public network access should be disabled for MySQL flexible servers</a> (/providers/microsoft.authorization/policydefinitions/c9299215-ae47-4f50-9c54-8a392f68a052))

0 Blueprints scoped

   Download CSV semicolon | comma
  *Depending on the number of rows and your computer´s performance the table may respond with delay, download the csv for better filtering experience
Scope Role RoleId Role Type Data Can do Role assignment Identity Displayname Identity SignInName Identity ObjectId Identity Type Applicability Applies through membership Group Details Role AssignmentId Related Policy Assignment CreatedOn CreatedBy
inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct /providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706 none 12/31/2021 01:33:57 ObjectType: User Member; ObjectDisplayName: Preston Parsard [AUTO]; ObjectSignInName: autocloudarc@autocloudarcm365.onmicrosoft.com; ObjectId: 289bfa7f-6c28-4240-aa52-dd105c74642d
inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877 none 01/25/2022 23:38:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e none 03/09/2022 00:40:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7 none 12/31/2021 01:39:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d none 08/02/2021 00:08:37 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d none 01/07/2022 00:19:25 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True AzOps n/a c426abf5-3e4d-48a0-8856-a5f9cfb4c10b SP APP INT direct /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153 none 10/15/2021 00:05:15 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Reader acdd72a7-3385-48ef-bd42-f606fba81ae7 Builtin false False Preston Parsard [MSFT] prestopa_microsoft.com#EXT#@autocloudarcm365.onmicrosoft.com 6384d11f-f8fa-4b62-b475-943fc13cbf8a User Guest direct /providers/microsoft.authorization/roleassignments/49df53fb-9a72-41c7-9e29-8e9a9d08e934 none 01/25/2022 23:43:33 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 05fc20b8-3126-42c7-82d5-beeabe6283ca Unknown direct /providers/microsoft.authorization/roleassignments/78c99b5c-f9ff-47e7-8b19-261a31981dc1 none 01/12/2022 19:37:04 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False prj-001-aaa-01 n/a 39523274-e37f-4043-a479-0304266fe06a SP MI Sys direct /providers/microsoft.authorization/roleassignments/51a31262-cc3f-4cfd-948e-0fd0239807b1 none 01/19/2022 21:27:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 80bdde2b-cdea-4f5a-b948-3acec376f45b Unknown direct /providers/microsoft.authorization/roleassignments/1810e41e-df60-4178-8c74-6ea2fec00a8a none 01/12/2022 00:11:41 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct /providers/microsoft.authorization/roleassignments/890aafc2-324a-4f6a-a40a-3fb501e8a0de none 12/30/2021 21:45:18 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a d15b328a-6901-4188-ab78-ee7131537c0f Unknown direct /providers/microsoft.authorization/roleassignments/9ce51771-571b-4aba-8a8b-1a869ff15a27 none 01/12/2022 21:05:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a debc9698-190e-497c-a00b-82dc86701bd6 Unknown direct /providers/microsoft.authorization/roleassignments/76765ae0-5721-47e6-88c1-c31983d77068 none 01/12/2022 17:59:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
thisScope MG Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 none 03/10/2022 10:47:40 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)

0 Subscriptions linked

Highlight Management Group in HierarchyMap

Management Group Name: Decommissioned

Management Group Id: alz-decommissioned

Management Group Path: 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-decommissioned

0 ManagementGroups below this scope

0 Subscriptions below this scope

Microsoft Defender for Cloud Secure Score: n/a Video , Blog , docs

No Management Group Diagnostic settings docs

No Consumption data available as switch parameter -DoAzureConsumption was not applied

0 ResourceTypes (all Subscriptions below this scope)

0 ResourceTypes (1st party) Diagnostics capable (all Subscriptions below this scope)

0 Policy assignments

0 PolicySet assignments

Policy Assignment Limit: 0/200

0 Custom Policy definitions scoped

0 Custom PolicySet definitions scoped

0 Blueprints scoped

   Download CSV semicolon | comma
  *Depending on the number of rows and your computer´s performance the table may respond with delay, download the csv for better filtering experience
Scope Role RoleId Role Type Data Can do Role assignment Identity Displayname Identity SignInName Identity ObjectId Identity Type Applicability Applies through membership Group Details Role AssignmentId Related Policy Assignment CreatedOn CreatedBy
inherited alz Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 none 03/10/2022 10:47:40 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct /providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706 none 12/31/2021 01:33:57 ObjectType: User Member; ObjectDisplayName: Preston Parsard [AUTO]; ObjectSignInName: autocloudarc@autocloudarcm365.onmicrosoft.com; ObjectId: 289bfa7f-6c28-4240-aa52-dd105c74642d
inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877 none 01/25/2022 23:38:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e none 03/09/2022 00:40:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7 none 12/31/2021 01:39:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d none 08/02/2021 00:08:37 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d none 01/07/2022 00:19:25 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True AzOps n/a c426abf5-3e4d-48a0-8856-a5f9cfb4c10b SP APP INT direct /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153 none 10/15/2021 00:05:15 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Reader acdd72a7-3385-48ef-bd42-f606fba81ae7 Builtin false False Preston Parsard [MSFT] prestopa_microsoft.com#EXT#@autocloudarcm365.onmicrosoft.com 6384d11f-f8fa-4b62-b475-943fc13cbf8a User Guest direct /providers/microsoft.authorization/roleassignments/49df53fb-9a72-41c7-9e29-8e9a9d08e934 none 01/25/2022 23:43:33 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 05fc20b8-3126-42c7-82d5-beeabe6283ca Unknown direct /providers/microsoft.authorization/roleassignments/78c99b5c-f9ff-47e7-8b19-261a31981dc1 none 01/12/2022 19:37:04 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False prj-001-aaa-01 n/a 39523274-e37f-4043-a479-0304266fe06a SP MI Sys direct /providers/microsoft.authorization/roleassignments/51a31262-cc3f-4cfd-948e-0fd0239807b1 none 01/19/2022 21:27:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 80bdde2b-cdea-4f5a-b948-3acec376f45b Unknown direct /providers/microsoft.authorization/roleassignments/1810e41e-df60-4178-8c74-6ea2fec00a8a none 01/12/2022 00:11:41 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct /providers/microsoft.authorization/roleassignments/890aafc2-324a-4f6a-a40a-3fb501e8a0de none 12/30/2021 21:45:18 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a d15b328a-6901-4188-ab78-ee7131537c0f Unknown direct /providers/microsoft.authorization/roleassignments/9ce51771-571b-4aba-8a8b-1a869ff15a27 none 01/12/2022 21:05:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a debc9698-190e-497c-a00b-82dc86701bd6 Unknown direct /providers/microsoft.authorization/roleassignments/76765ae0-5721-47e6-88c1-c31983d77068 none 01/12/2022 17:59:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
thisScope MG Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-decommissioned/providers/microsoft.authorization/roleassignments/a2474fb8-5d7f-4d9a-9646-363d798b25f7 none 03/10/2022 10:48:02 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)

0 Subscriptions linked

Highlight Management Group in HierarchyMap

Management Group Name: Landing Zones

Management Group Id: alz-landingzones

Management Group Path: 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-landingzones

2 ManagementGroups below this scope

0 Subscriptions below this scope

Microsoft Defender for Cloud Secure Score: n/a Video , Blog , docs

No Management Group Diagnostic settings docs

No Consumption data available as switch parameter -DoAzureConsumption was not applied

0 ResourceTypes (all Subscriptions below this scope)

0 ResourceTypes (1st party) Diagnostics capable (all Subscriptions below this scope)

0 Policy assignments

0 PolicySet assignments

Policy Assignment Limit: 0/200

0 Custom Policy definitions scoped

0 Custom PolicySet definitions scoped

0 Blueprints scoped

   Download CSV semicolon | comma
  *Depending on the number of rows and your computer´s performance the table may respond with delay, download the csv for better filtering experience
Scope Role RoleId Role Type Data Can do Role assignment Identity Displayname Identity SignInName Identity ObjectId Identity Type Applicability Applies through membership Group Details Role AssignmentId Related Policy Assignment CreatedOn CreatedBy
inherited alz Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 none 03/10/2022 10:47:40 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct /providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706 none 12/31/2021 01:33:57 ObjectType: User Member; ObjectDisplayName: Preston Parsard [AUTO]; ObjectSignInName: autocloudarc@autocloudarcm365.onmicrosoft.com; ObjectId: 289bfa7f-6c28-4240-aa52-dd105c74642d
inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877 none 01/25/2022 23:38:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e none 03/09/2022 00:40:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7 none 12/31/2021 01:39:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d none 08/02/2021 00:08:37 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d none 01/07/2022 00:19:25 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True AzOps n/a c426abf5-3e4d-48a0-8856-a5f9cfb4c10b SP APP INT direct /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153 none 10/15/2021 00:05:15 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Reader acdd72a7-3385-48ef-bd42-f606fba81ae7 Builtin false False Preston Parsard [MSFT] prestopa_microsoft.com#EXT#@autocloudarcm365.onmicrosoft.com 6384d11f-f8fa-4b62-b475-943fc13cbf8a User Guest direct /providers/microsoft.authorization/roleassignments/49df53fb-9a72-41c7-9e29-8e9a9d08e934 none 01/25/2022 23:43:33 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 05fc20b8-3126-42c7-82d5-beeabe6283ca Unknown direct /providers/microsoft.authorization/roleassignments/78c99b5c-f9ff-47e7-8b19-261a31981dc1 none 01/12/2022 19:37:04 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False prj-001-aaa-01 n/a 39523274-e37f-4043-a479-0304266fe06a SP MI Sys direct /providers/microsoft.authorization/roleassignments/51a31262-cc3f-4cfd-948e-0fd0239807b1 none 01/19/2022 21:27:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 80bdde2b-cdea-4f5a-b948-3acec376f45b Unknown direct /providers/microsoft.authorization/roleassignments/1810e41e-df60-4178-8c74-6ea2fec00a8a none 01/12/2022 00:11:41 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct /providers/microsoft.authorization/roleassignments/890aafc2-324a-4f6a-a40a-3fb501e8a0de none 12/30/2021 21:45:18 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a d15b328a-6901-4188-ab78-ee7131537c0f Unknown direct /providers/microsoft.authorization/roleassignments/9ce51771-571b-4aba-8a8b-1a869ff15a27 none 01/12/2022 21:05:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a debc9698-190e-497c-a00b-82dc86701bd6 Unknown direct /providers/microsoft.authorization/roleassignments/76765ae0-5721-47e6-88c1-c31983d77068 none 01/12/2022 17:59:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
thisScope MG Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-landingzones/providers/microsoft.authorization/roleassignments/c7c07346-d6d5-41a0-b253-dfcc55072f48 none 03/10/2022 10:48:03 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)

0 Subscriptions linked

Highlight Management Group in HierarchyMap

Management Group Name: Corp

Management Group Id: alz-landingzones-corp

Management Group Path: 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-landingzones/alz-landingzones-corp

0 ManagementGroups below this scope

0 Subscriptions below this scope

Microsoft Defender for Cloud Secure Score: n/a Video , Blog , docs

No Management Group Diagnostic settings docs

No Consumption data available as switch parameter -DoAzureConsumption was not applied

0 ResourceTypes (all Subscriptions below this scope)

0 ResourceTypes (1st party) Diagnostics capable (all Subscriptions below this scope)

0 Policy assignments

0 PolicySet assignments

Policy Assignment Limit: 0/200

0 Custom Policy definitions scoped

0 Custom PolicySet definitions scoped

0 Blueprints scoped

   Download CSV semicolon | comma
  *Depending on the number of rows and your computer´s performance the table may respond with delay, download the csv for better filtering experience
Scope Role RoleId Role Type Data Can do Role assignment Identity Displayname Identity SignInName Identity ObjectId Identity Type Applicability Applies through membership Group Details Role AssignmentId Related Policy Assignment CreatedOn CreatedBy
inherited alz Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 none 03/10/2022 10:47:40 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
inherited alz-landingzones Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-landingzones/providers/microsoft.authorization/roleassignments/c7c07346-d6d5-41a0-b253-dfcc55072f48 none 03/10/2022 10:48:03 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct /providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706 none 12/31/2021 01:33:57 ObjectType: User Member; ObjectDisplayName: Preston Parsard [AUTO]; ObjectSignInName: autocloudarc@autocloudarcm365.onmicrosoft.com; ObjectId: 289bfa7f-6c28-4240-aa52-dd105c74642d
inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877 none 01/25/2022 23:38:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e none 03/09/2022 00:40:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7 none 12/31/2021 01:39:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d none 08/02/2021 00:08:37 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d none 01/07/2022 00:19:25 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True AzOps n/a c426abf5-3e4d-48a0-8856-a5f9cfb4c10b SP APP INT direct /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153 none 10/15/2021 00:05:15 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Reader acdd72a7-3385-48ef-bd42-f606fba81ae7 Builtin false False Preston Parsard [MSFT] prestopa_microsoft.com#EXT#@autocloudarcm365.onmicrosoft.com 6384d11f-f8fa-4b62-b475-943fc13cbf8a User Guest direct /providers/microsoft.authorization/roleassignments/49df53fb-9a72-41c7-9e29-8e9a9d08e934 none 01/25/2022 23:43:33 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 05fc20b8-3126-42c7-82d5-beeabe6283ca Unknown direct /providers/microsoft.authorization/roleassignments/78c99b5c-f9ff-47e7-8b19-261a31981dc1 none 01/12/2022 19:37:04 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False prj-001-aaa-01 n/a 39523274-e37f-4043-a479-0304266fe06a SP MI Sys direct /providers/microsoft.authorization/roleassignments/51a31262-cc3f-4cfd-948e-0fd0239807b1 none 01/19/2022 21:27:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 80bdde2b-cdea-4f5a-b948-3acec376f45b Unknown direct /providers/microsoft.authorization/roleassignments/1810e41e-df60-4178-8c74-6ea2fec00a8a none 01/12/2022 00:11:41 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct /providers/microsoft.authorization/roleassignments/890aafc2-324a-4f6a-a40a-3fb501e8a0de none 12/30/2021 21:45:18 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a d15b328a-6901-4188-ab78-ee7131537c0f Unknown direct /providers/microsoft.authorization/roleassignments/9ce51771-571b-4aba-8a8b-1a869ff15a27 none 01/12/2022 21:05:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a debc9698-190e-497c-a00b-82dc86701bd6 Unknown direct /providers/microsoft.authorization/roleassignments/76765ae0-5721-47e6-88c1-c31983d77068 none 01/12/2022 17:59:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
thisScope MG Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-landingzones-corp/providers/microsoft.authorization/roleassignments/b706c72d-88d9-449b-9814-bb832b53e7f0 none 03/10/2022 10:48:25 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)

0 Subscriptions linked

Highlight Management Group in HierarchyMap

Management Group Name: Online

Management Group Id: alz-landingzones-online

Management Group Path: 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-landingzones/alz-landingzones-online

0 ManagementGroups below this scope

0 Subscriptions below this scope

Microsoft Defender for Cloud Secure Score: n/a Video , Blog , docs

No Management Group Diagnostic settings docs

No Consumption data available as switch parameter -DoAzureConsumption was not applied

0 ResourceTypes (all Subscriptions below this scope)

0 ResourceTypes (1st party) Diagnostics capable (all Subscriptions below this scope)

0 Policy assignments

0 PolicySet assignments

Policy Assignment Limit: 0/200

0 Custom Policy definitions scoped

0 Custom PolicySet definitions scoped

0 Blueprints scoped

   Download CSV semicolon | comma
  *Depending on the number of rows and your computer´s performance the table may respond with delay, download the csv for better filtering experience
Scope Role RoleId Role Type Data Can do Role assignment Identity Displayname Identity SignInName Identity ObjectId Identity Type Applicability Applies through membership Group Details Role AssignmentId Related Policy Assignment CreatedOn CreatedBy
inherited alz Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 none 03/10/2022 10:47:40 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
inherited alz-landingzones Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-landingzones/providers/microsoft.authorization/roleassignments/c7c07346-d6d5-41a0-b253-dfcc55072f48 none 03/10/2022 10:48:03 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct /providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706 none 12/31/2021 01:33:57 ObjectType: User Member; ObjectDisplayName: Preston Parsard [AUTO]; ObjectSignInName: autocloudarc@autocloudarcm365.onmicrosoft.com; ObjectId: 289bfa7f-6c28-4240-aa52-dd105c74642d
inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877 none 01/25/2022 23:38:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e none 03/09/2022 00:40:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7 none 12/31/2021 01:39:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d none 08/02/2021 00:08:37 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d none 01/07/2022 00:19:25 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True AzOps n/a c426abf5-3e4d-48a0-8856-a5f9cfb4c10b SP APP INT direct /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153 none 10/15/2021 00:05:15 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Reader acdd72a7-3385-48ef-bd42-f606fba81ae7 Builtin false False Preston Parsard [MSFT] prestopa_microsoft.com#EXT#@autocloudarcm365.onmicrosoft.com 6384d11f-f8fa-4b62-b475-943fc13cbf8a User Guest direct /providers/microsoft.authorization/roleassignments/49df53fb-9a72-41c7-9e29-8e9a9d08e934 none 01/25/2022 23:43:33 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 05fc20b8-3126-42c7-82d5-beeabe6283ca Unknown direct /providers/microsoft.authorization/roleassignments/78c99b5c-f9ff-47e7-8b19-261a31981dc1 none 01/12/2022 19:37:04 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False prj-001-aaa-01 n/a 39523274-e37f-4043-a479-0304266fe06a SP MI Sys direct /providers/microsoft.authorization/roleassignments/51a31262-cc3f-4cfd-948e-0fd0239807b1 none 01/19/2022 21:27:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 80bdde2b-cdea-4f5a-b948-3acec376f45b Unknown direct /providers/microsoft.authorization/roleassignments/1810e41e-df60-4178-8c74-6ea2fec00a8a none 01/12/2022 00:11:41 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct /providers/microsoft.authorization/roleassignments/890aafc2-324a-4f6a-a40a-3fb501e8a0de none 12/30/2021 21:45:18 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a d15b328a-6901-4188-ab78-ee7131537c0f Unknown direct /providers/microsoft.authorization/roleassignments/9ce51771-571b-4aba-8a8b-1a869ff15a27 none 01/12/2022 21:05:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a debc9698-190e-497c-a00b-82dc86701bd6 Unknown direct /providers/microsoft.authorization/roleassignments/76765ae0-5721-47e6-88c1-c31983d77068 none 01/12/2022 17:59:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
thisScope MG Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-landingzones-online/providers/microsoft.authorization/roleassignments/dd120953-11ae-4f10-8856-49e430d1111d none 03/10/2022 10:48:25 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)

0 Subscriptions linked

Highlight Management Group in HierarchyMap

Management Group Name: Platform

Management Group Id: alz-platform

Management Group Path: 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-platform

3 ManagementGroups below this scope

0 Subscriptions below this scope

Microsoft Defender for Cloud Secure Score: n/a Video , Blog , docs

No Management Group Diagnostic settings docs

No Consumption data available as switch parameter -DoAzureConsumption was not applied

0 ResourceTypes (all Subscriptions below this scope)

0 ResourceTypes (1st party) Diagnostics capable (all Subscriptions below this scope)

0 Policy assignments

0 PolicySet assignments

Policy Assignment Limit: 0/200

0 Custom Policy definitions scoped

0 Custom PolicySet definitions scoped

0 Blueprints scoped

   Download CSV semicolon | comma
  *Depending on the number of rows and your computer´s performance the table may respond with delay, download the csv for better filtering experience
Scope Role RoleId Role Type Data Can do Role assignment Identity Displayname Identity SignInName Identity ObjectId Identity Type Applicability Applies through membership Group Details Role AssignmentId Related Policy Assignment CreatedOn CreatedBy
inherited alz Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 none 03/10/2022 10:47:40 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct /providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706 none 12/31/2021 01:33:57 ObjectType: User Member; ObjectDisplayName: Preston Parsard [AUTO]; ObjectSignInName: autocloudarc@autocloudarcm365.onmicrosoft.com; ObjectId: 289bfa7f-6c28-4240-aa52-dd105c74642d
inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877 none 01/25/2022 23:38:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e none 03/09/2022 00:40:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7 none 12/31/2021 01:39:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d none 08/02/2021 00:08:37 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d none 01/07/2022 00:19:25 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True AzOps n/a c426abf5-3e4d-48a0-8856-a5f9cfb4c10b SP APP INT direct /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153 none 10/15/2021 00:05:15 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Reader acdd72a7-3385-48ef-bd42-f606fba81ae7 Builtin false False Preston Parsard [MSFT] prestopa_microsoft.com#EXT#@autocloudarcm365.onmicrosoft.com 6384d11f-f8fa-4b62-b475-943fc13cbf8a User Guest direct /providers/microsoft.authorization/roleassignments/49df53fb-9a72-41c7-9e29-8e9a9d08e934 none 01/25/2022 23:43:33 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 05fc20b8-3126-42c7-82d5-beeabe6283ca Unknown direct /providers/microsoft.authorization/roleassignments/78c99b5c-f9ff-47e7-8b19-261a31981dc1 none 01/12/2022 19:37:04 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False prj-001-aaa-01 n/a 39523274-e37f-4043-a479-0304266fe06a SP MI Sys direct /providers/microsoft.authorization/roleassignments/51a31262-cc3f-4cfd-948e-0fd0239807b1 none 01/19/2022 21:27:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 80bdde2b-cdea-4f5a-b948-3acec376f45b Unknown direct /providers/microsoft.authorization/roleassignments/1810e41e-df60-4178-8c74-6ea2fec00a8a none 01/12/2022 00:11:41 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct /providers/microsoft.authorization/roleassignments/890aafc2-324a-4f6a-a40a-3fb501e8a0de none 12/30/2021 21:45:18 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a d15b328a-6901-4188-ab78-ee7131537c0f Unknown direct /providers/microsoft.authorization/roleassignments/9ce51771-571b-4aba-8a8b-1a869ff15a27 none 01/12/2022 21:05:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a debc9698-190e-497c-a00b-82dc86701bd6 Unknown direct /providers/microsoft.authorization/roleassignments/76765ae0-5721-47e6-88c1-c31983d77068 none 01/12/2022 17:59:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
thisScope MG Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-platform/providers/microsoft.authorization/roleassignments/64677d6a-3574-4abd-a351-5ad5dc1da7c7 none 03/10/2022 10:48:02 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)

0 Subscriptions linked

Highlight Management Group in HierarchyMap

Management Group Name: Connectivity

Management Group Id: alz-platform-connectivity

Management Group Path: 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-platform/alz-platform-connectivity

0 ManagementGroups below this scope

0 Subscriptions below this scope

Microsoft Defender for Cloud Secure Score: n/a Video , Blog , docs

No Management Group Diagnostic settings docs

No Consumption data available as switch parameter -DoAzureConsumption was not applied

0 ResourceTypes (all Subscriptions below this scope)

0 ResourceTypes (1st party) Diagnostics capable (all Subscriptions below this scope)

0 Policy assignments

0 PolicySet assignments

Policy Assignment Limit: 0/200

0 Custom Policy definitions scoped

0 Custom PolicySet definitions scoped

0 Blueprints scoped

   Download CSV semicolon | comma
  *Depending on the number of rows and your computer´s performance the table may respond with delay, download the csv for better filtering experience
Scope Role RoleId Role Type Data Can do Role assignment Identity Displayname Identity SignInName Identity ObjectId Identity Type Applicability Applies through membership Group Details Role AssignmentId Related Policy Assignment CreatedOn CreatedBy
inherited alz Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 none 03/10/2022 10:47:40 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
inherited alz-platform Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-platform/providers/microsoft.authorization/roleassignments/64677d6a-3574-4abd-a351-5ad5dc1da7c7 none 03/10/2022 10:48:02 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct /providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706 none 12/31/2021 01:33:57 ObjectType: User Member; ObjectDisplayName: Preston Parsard [AUTO]; ObjectSignInName: autocloudarc@autocloudarcm365.onmicrosoft.com; ObjectId: 289bfa7f-6c28-4240-aa52-dd105c74642d
inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877 none 01/25/2022 23:38:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e none 03/09/2022 00:40:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7 none 12/31/2021 01:39:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d none 08/02/2021 00:08:37 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d none 01/07/2022 00:19:25 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True AzOps n/a c426abf5-3e4d-48a0-8856-a5f9cfb4c10b SP APP INT direct /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153 none 10/15/2021 00:05:15 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Reader acdd72a7-3385-48ef-bd42-f606fba81ae7 Builtin false False Preston Parsard [MSFT] prestopa_microsoft.com#EXT#@autocloudarcm365.onmicrosoft.com 6384d11f-f8fa-4b62-b475-943fc13cbf8a User Guest direct /providers/microsoft.authorization/roleassignments/49df53fb-9a72-41c7-9e29-8e9a9d08e934 none 01/25/2022 23:43:33 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 05fc20b8-3126-42c7-82d5-beeabe6283ca Unknown direct /providers/microsoft.authorization/roleassignments/78c99b5c-f9ff-47e7-8b19-261a31981dc1 none 01/12/2022 19:37:04 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False prj-001-aaa-01 n/a 39523274-e37f-4043-a479-0304266fe06a SP MI Sys direct /providers/microsoft.authorization/roleassignments/51a31262-cc3f-4cfd-948e-0fd0239807b1 none 01/19/2022 21:27:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 80bdde2b-cdea-4f5a-b948-3acec376f45b Unknown direct /providers/microsoft.authorization/roleassignments/1810e41e-df60-4178-8c74-6ea2fec00a8a none 01/12/2022 00:11:41 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct /providers/microsoft.authorization/roleassignments/890aafc2-324a-4f6a-a40a-3fb501e8a0de none 12/30/2021 21:45:18 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a d15b328a-6901-4188-ab78-ee7131537c0f Unknown direct /providers/microsoft.authorization/roleassignments/9ce51771-571b-4aba-8a8b-1a869ff15a27 none 01/12/2022 21:05:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a debc9698-190e-497c-a00b-82dc86701bd6 Unknown direct /providers/microsoft.authorization/roleassignments/76765ae0-5721-47e6-88c1-c31983d77068 none 01/12/2022 17:59:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
thisScope MG Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-platform-connectivity/providers/microsoft.authorization/roleassignments/80962acc-cc5c-4eaa-b2bd-f5c567c22766 none 03/10/2022 10:48:25 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)

0 Subscriptions linked

Highlight Management Group in HierarchyMap

Management Group Name: Identity

Management Group Id: alz-platform-identity

Management Group Path: 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-platform/alz-platform-identity

0 ManagementGroups below this scope

0 Subscriptions below this scope

Microsoft Defender for Cloud Secure Score: n/a Video , Blog , docs

No Management Group Diagnostic settings docs

No Consumption data available as switch parameter -DoAzureConsumption was not applied

0 ResourceTypes (all Subscriptions below this scope)

0 ResourceTypes (1st party) Diagnostics capable (all Subscriptions below this scope)

0 Policy assignments

0 PolicySet assignments

Policy Assignment Limit: 0/200

0 Custom Policy definitions scoped

0 Custom PolicySet definitions scoped

0 Blueprints scoped

   Download CSV semicolon | comma
  *Depending on the number of rows and your computer´s performance the table may respond with delay, download the csv for better filtering experience
Scope Role RoleId Role Type Data Can do Role assignment Identity Displayname Identity SignInName Identity ObjectId Identity Type Applicability Applies through membership Group Details Role AssignmentId Related Policy Assignment CreatedOn CreatedBy
inherited alz Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 none 03/10/2022 10:47:40 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
inherited alz-platform Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-platform/providers/microsoft.authorization/roleassignments/64677d6a-3574-4abd-a351-5ad5dc1da7c7 none 03/10/2022 10:48:02 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct /providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706 none 12/31/2021 01:33:57 ObjectType: User Member; ObjectDisplayName: Preston Parsard [AUTO]; ObjectSignInName: autocloudarc@autocloudarcm365.onmicrosoft.com; ObjectId: 289bfa7f-6c28-4240-aa52-dd105c74642d
inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877 none 01/25/2022 23:38:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e none 03/09/2022 00:40:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7 none 12/31/2021 01:39:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d none 08/02/2021 00:08:37 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d none 01/07/2022 00:19:25 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True AzOps n/a c426abf5-3e4d-48a0-8856-a5f9cfb4c10b SP APP INT direct /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153 none 10/15/2021 00:05:15 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Reader acdd72a7-3385-48ef-bd42-f606fba81ae7 Builtin false False Preston Parsard [MSFT] prestopa_microsoft.com#EXT#@autocloudarcm365.onmicrosoft.com 6384d11f-f8fa-4b62-b475-943fc13cbf8a User Guest direct /providers/microsoft.authorization/roleassignments/49df53fb-9a72-41c7-9e29-8e9a9d08e934 none 01/25/2022 23:43:33 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 05fc20b8-3126-42c7-82d5-beeabe6283ca Unknown direct /providers/microsoft.authorization/roleassignments/78c99b5c-f9ff-47e7-8b19-261a31981dc1 none 01/12/2022 19:37:04 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False prj-001-aaa-01 n/a 39523274-e37f-4043-a479-0304266fe06a SP MI Sys direct /providers/microsoft.authorization/roleassignments/51a31262-cc3f-4cfd-948e-0fd0239807b1 none 01/19/2022 21:27:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 80bdde2b-cdea-4f5a-b948-3acec376f45b Unknown direct /providers/microsoft.authorization/roleassignments/1810e41e-df60-4178-8c74-6ea2fec00a8a none 01/12/2022 00:11:41 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct /providers/microsoft.authorization/roleassignments/890aafc2-324a-4f6a-a40a-3fb501e8a0de none 12/30/2021 21:45:18 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a d15b328a-6901-4188-ab78-ee7131537c0f Unknown direct /providers/microsoft.authorization/roleassignments/9ce51771-571b-4aba-8a8b-1a869ff15a27 none 01/12/2022 21:05:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a debc9698-190e-497c-a00b-82dc86701bd6 Unknown direct /providers/microsoft.authorization/roleassignments/76765ae0-5721-47e6-88c1-c31983d77068 none 01/12/2022 17:59:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
thisScope MG Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-platform-identity/providers/microsoft.authorization/roleassignments/72412164-1650-4110-aaf1-708631c37efb none 03/10/2022 10:48:26 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)

0 Subscriptions linked

Highlight Management Group in HierarchyMap

Management Group Name: Management

Management Group Id: alz-platform-management

Management Group Path: 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-platform/alz-platform-management

0 ManagementGroups below this scope

0 Subscriptions below this scope

Microsoft Defender for Cloud Secure Score: n/a Video , Blog , docs

No Management Group Diagnostic settings docs

No Consumption data available as switch parameter -DoAzureConsumption was not applied

0 ResourceTypes (all Subscriptions below this scope)

0 ResourceTypes (1st party) Diagnostics capable (all Subscriptions below this scope)

0 Policy assignments

0 PolicySet assignments

Policy Assignment Limit: 0/200

0 Custom Policy definitions scoped

0 Custom PolicySet definitions scoped

0 Blueprints scoped

   Download CSV semicolon | comma
  *Depending on the number of rows and your computer´s performance the table may respond with delay, download the csv for better filtering experience
Scope Role RoleId Role Type Data Can do Role assignment Identity Displayname Identity SignInName Identity ObjectId Identity Type Applicability Applies through membership Group Details Role AssignmentId Related Policy Assignment CreatedOn CreatedBy
inherited alz Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 none 03/10/2022 10:47:40 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
inherited alz-platform Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-platform/providers/microsoft.authorization/roleassignments/64677d6a-3574-4abd-a351-5ad5dc1da7c7 none 03/10/2022 10:48:02 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct /providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706 none 12/31/2021 01:33:57 ObjectType: User Member; ObjectDisplayName: Preston Parsard [AUTO]; ObjectSignInName: autocloudarc@autocloudarcm365.onmicrosoft.com; ObjectId: 289bfa7f-6c28-4240-aa52-dd105c74642d
inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877 none 01/25/2022 23:38:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e none 03/09/2022 00:40:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7 none 12/31/2021 01:39:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d none 08/02/2021 00:08:37 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d none 01/07/2022 00:19:25 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True AzOps n/a c426abf5-3e4d-48a0-8856-a5f9cfb4c10b SP APP INT direct /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153 none 10/15/2021 00:05:15 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Reader acdd72a7-3385-48ef-bd42-f606fba81ae7 Builtin false False Preston Parsard [MSFT] prestopa_microsoft.com#EXT#@autocloudarcm365.onmicrosoft.com 6384d11f-f8fa-4b62-b475-943fc13cbf8a User Guest direct /providers/microsoft.authorization/roleassignments/49df53fb-9a72-41c7-9e29-8e9a9d08e934 none 01/25/2022 23:43:33 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 05fc20b8-3126-42c7-82d5-beeabe6283ca Unknown direct /providers/microsoft.authorization/roleassignments/78c99b5c-f9ff-47e7-8b19-261a31981dc1 none 01/12/2022 19:37:04 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False prj-001-aaa-01 n/a 39523274-e37f-4043-a479-0304266fe06a SP MI Sys direct /providers/microsoft.authorization/roleassignments/51a31262-cc3f-4cfd-948e-0fd0239807b1 none 01/19/2022 21:27:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 80bdde2b-cdea-4f5a-b948-3acec376f45b Unknown direct /providers/microsoft.authorization/roleassignments/1810e41e-df60-4178-8c74-6ea2fec00a8a none 01/12/2022 00:11:41 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct /providers/microsoft.authorization/roleassignments/890aafc2-324a-4f6a-a40a-3fb501e8a0de none 12/30/2021 21:45:18 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a d15b328a-6901-4188-ab78-ee7131537c0f Unknown direct /providers/microsoft.authorization/roleassignments/9ce51771-571b-4aba-8a8b-1a869ff15a27 none 01/12/2022 21:05:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a debc9698-190e-497c-a00b-82dc86701bd6 Unknown direct /providers/microsoft.authorization/roleassignments/76765ae0-5721-47e6-88c1-c31983d77068 none 01/12/2022 17:59:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
thisScope MG Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-platform-management/providers/microsoft.authorization/roleassignments/cfa9db8a-5ab9-474d-8daf-6a484895b1b3 none 03/10/2022 10:48:26 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)

0 Subscriptions linked

Highlight Management Group in HierarchyMap

Management Group Name: Sandbox

Management Group Id: alz-sandbox

Management Group Path: 1561a00a-6d2f-4867-af27-c6bd5d016f7d/alz/alz-sandbox

0 ManagementGroups below this scope

0 Subscriptions below this scope

Microsoft Defender for Cloud Secure Score: n/a Video , Blog , docs

No Management Group Diagnostic settings docs

No Consumption data available as switch parameter -DoAzureConsumption was not applied

0 ResourceTypes (all Subscriptions below this scope)

0 ResourceTypes (1st party) Diagnostics capable (all Subscriptions below this scope)

0 Policy assignments

0 PolicySet assignments

Policy Assignment Limit: 0/200

0 Custom Policy definitions scoped

0 Custom PolicySet definitions scoped

0 Blueprints scoped

   Download CSV semicolon | comma
  *Depending on the number of rows and your computer´s performance the table may respond with delay, download the csv for better filtering experience
Scope Role RoleId Role Type Data Can do Role assignment Identity Displayname Identity SignInName Identity ObjectId Identity Type Applicability Applies through membership Group Details Role AssignmentId Related Policy Assignment CreatedOn CreatedBy
inherited alz Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz/providers/microsoft.authorization/roleassignments/71d463db-41ca-40fa-9f19-934edc536ce4 none 03/10/2022 10:47:40 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)
inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct /providers/microsoft.authorization/roleassignments/44e9e551-f8d0-4297-a36c-88335c474706 none 12/31/2021 01:33:57 ObjectType: User Member; ObjectDisplayName: Preston Parsard [AUTO]; ObjectSignInName: autocloudarc@autocloudarcm365.onmicrosoft.com; ObjectId: 289bfa7f-6c28-4240-aa52-dd105c74642d
inherited Tenant User Access Administrator 18d7d88d-d35e-4fb5-a5c3-7773c20a72d9 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct /providers/microsoft.authorization/roleassignments/6773d848-adf0-4611-a72a-a1f9f7bcb877 none 01/25/2022 23:38:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.authorization/roleassignments/0d9ab9b1-6b3c-4b60-8c34-dc11054f1f2e none 03/09/2022 00:40:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston Parsard [AUTO] autocloudarc@autocloudarcm365.onmicrosoft.com 289bfa7f-6c28-4240-aa52-dd105c74642d User Member direct /providers/microsoft.authorization/roleassignments/454e6795-7d2b-46a2-b84b-dc87e64c47d7 none 12/31/2021 01:39:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True Preston K. Parsard [UNSL] unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com 549f367b-a4c1-49e9-8949-588e72b32fe2 User Guest direct /providers/microsoft.authorization/roleassignments/586b7a4a-b65d-4c46-b4dd-aef0409fea4d none 08/02/2021 00:08:37 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct /providers/microsoft.authorization/roleassignments/11262d0d-410b-43ab-9727-8ea3118c909d none 01/07/2022 00:19:25 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True AzOps n/a c426abf5-3e4d-48a0-8856-a5f9cfb4c10b SP APP INT direct /providers/microsoft.authorization/roleassignments/169b304b-49cb-405c-9756-005cdfe95153 none 10/15/2021 00:05:15 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Reader acdd72a7-3385-48ef-bd42-f606fba81ae7 Builtin false False Preston Parsard [MSFT] prestopa_microsoft.com#EXT#@autocloudarcm365.onmicrosoft.com 6384d11f-f8fa-4b62-b475-943fc13cbf8a User Guest direct /providers/microsoft.authorization/roleassignments/49df53fb-9a72-41c7-9e29-8e9a9d08e934 none 01/25/2022 23:43:33 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 05fc20b8-3126-42c7-82d5-beeabe6283ca Unknown direct /providers/microsoft.authorization/roleassignments/78c99b5c-f9ff-47e7-8b19-261a31981dc1 none 01/12/2022 19:37:04 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False prj-001-aaa-01 n/a 39523274-e37f-4043-a479-0304266fe06a SP MI Sys direct /providers/microsoft.authorization/roleassignments/51a31262-cc3f-4cfd-948e-0fd0239807b1 none 01/19/2022 21:27:28 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a 80bdde2b-cdea-4f5a-b948-3acec376f45b Unknown direct /providers/microsoft.authorization/roleassignments/1810e41e-df60-4178-8c74-6ea2fec00a8a none 01/12/2022 00:11:41 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False azr-dev-0072-aaa-01 n/a c1a110d4-e5cb-42f4-bad5-8f74cac58673 SP MI Sys direct /providers/microsoft.authorization/roleassignments/890aafc2-324a-4f6a-a40a-3fb501e8a0de none 12/30/2021 21:45:18 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a d15b328a-6901-4188-ab78-ee7131537c0f Unknown direct /providers/microsoft.authorization/roleassignments/9ce51771-571b-4aba-8a8b-1a869ff15a27 none 01/12/2022 21:05:54 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
inherited Tenant Contributor b24988ac-6180-42a0-ab88-20f7382dd24c Builtin false False n/a n/a debc9698-190e-497c-a00b-82dc86701bd6 Unknown direct /providers/microsoft.authorization/roleassignments/76765ae0-5721-47e6-88c1-c31983d77068 none 01/12/2022 17:59:00 ObjectType: User Guest; ObjectDisplayName: Preston K. Parsard [UNSL]; ObjectSignInName: unisol14_outlook.com#EXT#@autocloudarcm365.onmicrosoft.com; ObjectId: 549f367b-a4c1-49e9-8949-588e72b32fe2
thisScope MG Owner 8e3af657-a8ff-443c-a75c-2fe8c4bcb635 Builtin false True spn-alz-accelerator-11 n/a 07390265-aba8-4f54-8a36-db57e2c11574 SP APP INT direct /providers/microsoft.management/managementgroups/alz-sandbox/providers/microsoft.authorization/roleassignments/08749dc1-4bc8-4d50-aa00-0aa45e8bd443 none 03/10/2022 10:48:02 ObjectType: SP App EXT, ObjectDisplayName: Azure Management Groups, ObjectSignInName: n/a, ObjectId: 3be3c8fb-f35c-486d-99a6-e449adec0d32 (r)

0 Subscriptions linked